last executing test programs: 3m26.948787383s ago: executing program 1 (id=231): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12ea06008a768840761702500df10102000100405cea170d28096d950000000000000b5172f50c0a10067dd34bcefef84892ed5691c3c72dc7ae77720b7f0a0d4d274d73c70a57f20b4c6517"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) (async) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x100800) getsockopt(r0, 0x1, 0x8, &(0x7f00000000c0)=""/30, &(0x7f0000000100)=0x1e) (async) io_uring_enter(0xffffffffffffffff, 0x30a3, 0x792c, 0xa, &(0x7f0000000000)={[0x6]}, 0x8) 3m23.789310234s ago: executing program 1 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1, 0x1, 0x80a0000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_RUN(r3, 0xae80, 0x0) open_tree(r2, &(0x7f0000000140)='./file0\x00', 0x1000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m22.549240392s ago: executing program 1 (id=244): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbdcbbbb0800450000300000000006019078ac1e0001ac1414aa037090780009800145"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x10001, 0x12) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) (async) sendto$packet(r2, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@remote, 0x45, r3}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090264000100000000090400000103000000092100000001220b00090581030000000000"], 0x0) (async) process_madvise(0xffffffffffffffff, &(0x7f0000001980)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x1, 0x0) io_setup(0x2370, &(0x7f0000000180)) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0}, 0x0) 3m21.364497986s ago: executing program 1 (id=248): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x238, &(0x7f0000000540)={0x0, 0x1c22, 0x2, 0x0, 0x17f}, &(0x7f00000002c0), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, 0x0, 0x2) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000140)={0x1, 'ip6tnl0\x00', {}, 0x7ff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000280)={0x3, {0xfffffff7, 0x2, 0x1, 0x6}, {0x5, 0x4, 0x0, 0x9}, {0x5, 0xa}}) io_setup(0x5, 0xfffffffffffffffd) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24008884) r4 = syz_io_uring_setup(0x24ff, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x35, 0x0, 0x2, 0xfffffffc}, {0x34, 0xfc, 0x83, 0x2}, {0x2, 0x0, 0xfc}, {0x6}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 3m19.476855365s ago: executing program 1 (id=253): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@fragment={0x1, 0x0, 0x3, 0x1, 0x0, 0x2, 0x65}], {0x4e21, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x7, 0x100, @val=0x80}}}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x7, 0xfb6}) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r5, 0x0, 0x0, 0x0, 0x40010020}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x3, 0x9, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x68, 0x0, 0x5, 0x4, 0x0, @loopback, @broadcast, {[@timestamp={0x44, 0x4, 0x8e, 0x0, 0x7}]}}}}}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, {0x6, 0x8000000000000000}, 0x5}, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x40, 0x4, 0x76, {0x76, 0x15c99ed699e0ddf8, "411939b8e84632b245cd6e890706e06727ec240663a96dd969589034acf5814eb6f50117475ab6a0f3697a0e7bb63910c194a7cbcb13b9d641a8588e9e4c607c934fbc4ea17a1ec55fe640422032c85b171847a53a5071f9a22fd3d2d88ee725f9ce4ae3469786ec22af9b3c4d9cb4acdee77837"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x9, "418b329b"}, @local=@item_012={0x0, 0x2, 0x3}, @global=@item_012={0x1, 0x1, 0x2, "e8"}, @main=@item_012={0x1, 0x0, 0xa, "9f"}, @global=@item_4={0x3, 0x1, 0x3, "5485dbe6"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0x100}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)={0x40, 0xf, 0xbb, "2ce70e9fd8570d8672b70f1c80231768deb9acce21cd92f48e808423cb89353387bda73dd57e15d074b2f414e51a923edf23b2d1f0c398700bf9421ddf063a32749ae3ce9703ceecca81f2ae55e10f8924bed28a5799cd416de8452ef77a7e10833d0d4dc0044d4eaf5344d24c8c8f1f5f3d3365dc269258f9e15f63f38d7284095c35fe54eaf1a8e2ab2089956987479a0555e6a7e4dffa8400237d66e0a0b37638bdb38962a1b47526bc5ed3599fb05986e58bc8617a9a735de9"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000800)=ANY=[@ANYBLOB="20018ce8ffff6d41f2cf851d581e098d5194199fbd0bb76b85d92e48510903e10e83c3a8514ffad58aa7e74913e62b34793580dd4491bb18d57e6fa03f60f1520381b22d636215791af65ae8b6fa0a68c72c8f7c76e923b051031e7c6b79b6ae73d12b4e65566e476e08691ef5f3fd489d82df6f4e5b56ec972eb60d53edc4ab090acf6ad085f06465633a48161b86865447d91e9837cab832815d9c31781423f677c237bc1bdd11efcb59da49889af3e59b4bac72aec26e2e74a98d9ecca19ee9ed8642e63f5d74011e5f271983bb064bbb804b16", @ANYRESHEX=r1, @ANYBLOB="ca4a6c7ac9c1e1e3a9bac1b27977715fbe4466f8a9a11bde29"], &(0x7f0000000780)={0x20, 0x3, 0x1, 0xac}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x0, 0xd, 0x4, "97dc264d"}, 0x0, 0x0, 0x0, 0x0}) 3m16.339761163s ago: executing program 1 (id=262): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x235}}}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000e521200300b6932d8981d6df243a6ffd1a68bddfad69bb4c721b28b3551c2141648e42357c49a915064982cb2f4f2d619b148b0e22fdff57b80cccf544c1f705b19a68ea79f71faf11132bc25b3117c53c610fcca2fecc4ce3171ba363cd2e46e4969cdda97e8133a9881fb1a14d905ad350e984a435c78747c013ce5e37069b2298ec", @ANYRES16=r3, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f6261746164760008000380180003801400018005000200000000000800010004000000"], 0x48}}, 0x804) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x73d, {{0xa, 0x4e22, 0x449d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x88) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x10001, 0x20d}) r5 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@gettaction={0x68, 0x32, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x68}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44c40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) 3m0.887057383s ago: executing program 32 (id=262): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x235}}}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000e521200300b6932d8981d6df243a6ffd1a68bddfad69bb4c721b28b3551c2141648e42357c49a915064982cb2f4f2d619b148b0e22fdff57b80cccf544c1f705b19a68ea79f71faf11132bc25b3117c53c610fcca2fecc4ce3171ba363cd2e46e4969cdda97e8133a9881fb1a14d905ad350e984a435c78747c013ce5e37069b2298ec", @ANYRES16=r3, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f6261746164760008000380180003801400018005000200000000000800010004000000"], 0x48}}, 0x804) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x73d, {{0xa, 0x4e22, 0x449d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x88) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0xa2, 0x10001, 0x20d}) r5 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@gettaction={0x68, 0x32, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x68}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x44c40) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close_range(r9, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) 15.27694767s ago: executing program 5 (id=879): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x490600, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x202, 0x1000) fanotify_mark(r2, 0x1, 0x48000013, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) 14.479189019s ago: executing program 4 (id=883): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0xffffffffffff0f00) 13.700723252s ago: executing program 4 (id=885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x0, &(0x7f0000000100)}) utime(0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCSETS(r3, 0x80047456, &(0x7f0000000040)={0xf88, 0x4, 0x3c, 0x9, 0x19, "fbed35c02f508d87dc8e17db11df8ee93797d8"}) sendto$inet6(r0, &(0x7f0000000200)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x44044) syz_usb_connect$uac1(0x6, 0xaa, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x98, 0x3, 0x1, 0x3, 0x19cce99f87779c7, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x92, 0xd}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x2, 0x9, {0x7, 0x25, 0x1, 0x80, 0x8, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x6a, 0x1}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xfd, 0x1, 0x3, 0xbc, "7f62"}, @as_header={0x7, 0x24, 0x1, 0xa, 0x9, 0x1002}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x1, 0x80, 0x5, "18d41ef5ecfd1d"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x5, 0x1, 0xff, 0x6, "efd4"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x1, 0x80, 0x81}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x6, 0x4, {0x7, 0x25, 0x1, 0x0, 0x5, 0x6}}}}}}}]}}, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) socket$alg(0x26, 0x5, 0x0) syz_clone(0x800000, &(0x7f0000000280), 0x0, &(0x7f0000000080), &(0x7f0000000380), &(0x7f00000003c0)="3230257fba12322ed5573507928e6f91d7a7b7142217cd771c90e685d7cdbcb9cdc61c3e02315a3616788e8e7b759d11d93a02c816bee155a648ccb0a063cd7c7fddb8c536d5") bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e27, 0xb, @mcast1, 0x800a}, 0x1c) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20700) 10.862453388s ago: executing program 5 (id=890): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0x0, 0x1, @remote, 0x1}, 0x1c) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7fee}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000000)={0x210a, r7}, 0x0) landlock_restrict_self(r8, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') ioctl$I2C_PEC(r1, 0x708, 0x10) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000902240001008cb0090904004bcb44487a9c089f1b6d0101030003000921fbff01012207000905810300047e0d00"/64], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r9 = syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0x49f1, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000140), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x22, &(0x7f0000000380)={0x0}, 0x1) 10.449250625s ago: executing program 4 (id=892): fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 9.070040992s ago: executing program 0 (id=899): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) 8.54797646s ago: executing program 2 (id=900): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x490600, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x202, 0x1000) fanotify_mark(r2, 0x1, 0x48000013, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) 7.354275378s ago: executing program 4 (id=902): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000001980)=0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000100)={0x20, 0x14, 0x1, 'l'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000005c0)={0x20, 0xa}, 0x0, 0x0}) 7.14227352s ago: executing program 0 (id=903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x98, 0x4, 0x4e, 0x20, 0xdba, 0x3000, 0x5170, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x26, 0x40, 0x1, [{{0x9, 0x4, 0x5e, 0x0, 0x0, 0x57, 0x95, 0xbf, 0x3}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000fddbdf250100000000000000c9649d3e81849eb27b2384c3d569079002410000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040840) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000013030a030000000000000000000200000008000b4000000004040004800900010073797a300000000008000540fffffffc140000001100010000000000000000000000000a5e627fc7e0f6f3684c5f33c7dbb2c55a666f32166cee9d4e2536e83830b09e0d99b4758c80af03b47f9e14cb68fe35d66f4d5aefd0be2869ec7f62fdc8258f20f92496556e2af8b6f29925237043956411"], 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000013030a030000000000000000000200000008000b4000000004040004800900010073797a300000000008000540fffffffc140000001100010000000000000000000000000a5e627fc7e0f6f3684c5f33c7dbb2c55a666f32166cee9d4e2536e83830b09e0d99b4758c80af03b47f9e14cb68fe35d66f4d5aefd0be2869ec7f62fdc8258f20f92496556e2af8b6f29925237043956411"], 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) 6.578345475s ago: executing program 5 (id=905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x22, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000480), &(0x7f0000000180)='%+9llu \x00', 0x2}, 0x20) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r6, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6.441584586s ago: executing program 4 (id=906): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x850, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x9, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0xb, 0x40, 0xb083, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xe, 0x2e82, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x5, 0x6, 0xc, 0x2049b29, 0x6, 0x5, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0x7fffffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x13, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x4, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x6, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x1, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xae, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x1ff, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x2, 0x80, 0x2, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0xffff, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x5, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0x11, 0x1000, 0x2, 0xe, 0x4, 0x8, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x9, 0x7, 0x3, 0x4, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x40000000, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10000, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x9, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x81, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x8, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x3, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x80, 0x2, 0xd0000000, 0x5, 0x6, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0xa, 0xfffffffe, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0xd1f, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xa, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}]}]}}]}, 0x88c}}, 0x20040000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000740)=0x1) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0xffffff45, 0x0, 0x8, 0x8fc0, 0x5}) 5.816955335s ago: executing program 5 (id=907): syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) (async) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x1101, 0x1000, 0xffff, 0x7f, 0x6, 0x3ff, 0xf, 0x8, 0x6, 0x9, 0x8, 0x7, 0x5, 0x100000, 0x764, 0x3, 0x7f, 0xe, 0x2b11, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0x1, 0x8, 0x8000100, 0x3, 0x4, 0x11000, 0x3, 0x7, 0x79b, 0x8002, 0xffffffff, 0x5, 0x2, 0x9, 0x7, 0xf, 0x6bfcc669, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4003, 0x87, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x40006, 0x1, 0x4, 0x7, 0x400d, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x10000, 0x7fff, 0x2, 0x5, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20007, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x4, 0x2, 0xfffffff9, 0x8, 0x400, 0x4, 0x9, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x4, 0x1, 0x0, 'queue1\x00', 0x3ff}) (rerun: 64) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xf2, 0x78, 0xe, 0x20, 0xb48, 0x1009, 0x830d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xf8, 0x0, 0x0, 0xfb, 0x30, 0x2}}]}}]}}, 0x0) 5.688517389s ago: executing program 0 (id=908): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101040, 0x12) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x3a, 0x20, 0x70bd2d, 0x25dfdbfb, {0x1e}, [@typed={0x8, 0x146, 0x0, 0x0, @uid}, @nested={0x18, 0x21, 0x0, 0x1, [@typed={0x14, 0x44, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0xc) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'veth1_macvtap\x00', 0x100}) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) sendto$inet6(r1, &(0x7f0000000180)="704cc78a74175ad9b301781237d2d75829c359324ec4c885274f508b5fcc1f797a3ed382918c038b324ddc6751cf45cd223773b30a56ab9e313a8180e649adde5faa1e4a5e7b619770ee368d066a6e01b184e9c1", 0x54, 0x40, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @mcast2, 0x3}, 0x1c) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000240)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000280)=0x14) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x7f}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x7, 0x81, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001}, 0x20048011) (async) r4 = eventfd(0x2) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000400)={{r4}, 0xbed, 0x9, 0x8}) r5 = accept$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000480)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0x0, 0x1d0, 0x2c8, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f00000004c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @mcast1, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'dvmrp1\x00', {0xff}, {}, 0x3b, 0x3, 0x0, 0x60}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:lib_t:s0\x00'}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2, [0xff, 0xff000000, 0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'veth0_to_team\x00', 'vlan0\x00', {0xff}, {0xff}, 0x1, 0x9, 0x5, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0xb9, 0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x21, 0x0, 0x7, 0x800, 0x97, 0xf7, 0x9, 0x0, 0x80}, {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000a40)={0x0, 'geneve0\x00', {0x1}, 0xe4}) (async) connect$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x81}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x840) (async, rerun: 32) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f0000000bc0), 0x3, 0x2) (async, rerun: 32) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/stat\x00', 0x0, 0x0) (rerun: 32) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000cc0)={0x9, &(0x7f0000000c40)=[{0x7, 0x7, 0x2, 0xaf4}, {0x40, 0x3, 0xff, 0x3}, {0x52, 0x10, 0x81, 0x2}, {0x1, 0x1, 0x1, 0xfce}, {0x8, 0x74, 0x4, 0x6daaec14}, {0x9, 0x5, 0x7f, 0x6}, {0x3, 0x5, 0x1, 0x7fffffff}, {0x5, 0x10, 0x84, 0x2}, {0x0, 0xf7, 0xdb, 0x800}]}, 0x10) (async) syz_open_dev$usbmon(&(0x7f0000000d00), 0x8, 0x131000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000d40)='cubic\x00', 0x6) r7 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r7, 0xe, &(0x7f0000000d80)=""/51) syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r6) (async) r8 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x10) (async, rerun: 64) close(r6) (async, rerun: 64) recvmmsg(r8, &(0x7f0000002900)=[{{&(0x7f0000000e00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)=""/5, 0x5}, {&(0x7f0000000ec0)=""/155, 0x9b}, {&(0x7f0000000f80)=""/104, 0x68}], 0x3, &(0x7f0000001040)=""/4096, 0x1000}, 0xe64}, {{&(0x7f0000002040), 0x80, &(0x7f0000002300)=[{&(0x7f00000020c0)=""/227, 0xe3}, {&(0x7f00000021c0)=""/8, 0x8}, {&(0x7f0000002200)=""/223, 0xdf}], 0x3, &(0x7f0000002340)=""/121, 0x79}, 0xfffffffe}, {{&(0x7f00000023c0)=@hci, 0x80, &(0x7f0000002580)=[{&(0x7f0000002440)=""/57, 0x39}, {&(0x7f0000002480)=""/255, 0xff}], 0x2, &(0x7f00000025c0)=""/60, 0x3c}, 0x7f}, {{&(0x7f0000002600)=@qipcrtr, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002680)=""/238, 0xee}, {&(0x7f0000002780)}, {&(0x7f00000027c0)=""/250, 0xfa}], 0x3}, 0xb4}], 0x4, 0x12021, &(0x7f0000002a40)) 5.340960614s ago: executing program 0 (id=909): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x500, 0x4) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x12801, 0xc7) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xb, '\t\t'}, @global=@item_012={0x2, 0x1, 0x1, "42d3"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000180)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x211, @time={0x80000000, 0x7}, 0x40, {0x92, 0x4}, 0x0, 0x2, 0xf}) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000100)="33110b94", 0x4}], 0x1}}], 0x1, 0x4000800) recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) 5.091344655s ago: executing program 3 (id=910): r0 = socket(0x1, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 4.736410863s ago: executing program 3 (id=911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x3c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x14, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}}) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) (async) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000200)=0x6f4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0xff, 0x6}) (async) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@generic={0x1, 0xff, 0x6}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 4.472220837s ago: executing program 2 (id=912): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x94}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0462c3921c53ebfa95c1cd46f5820a414d3fd3ee48c26e4ea70a9db6ddca1f8ba0d7d16f"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) r2 = signalfd4(r0, &(0x7f0000000180)={[0x7]}, 0x8, 0x1000) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, &(0x7f00000001c0)={0x8, 0x141, 0xbc}, 0x0) (async, rerun: 64) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000200)={0x4, @capture={0x0, 0x1, {0xb6bc, 0xd4d}, 0x2, 0x5}}) (rerun: 64) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000340)={{r3}, "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"}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, 0x0, &(0x7f0000001380)={0x6, 0x2, 0x0, 0x4}) (async) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000013c0)={0xe, {0x1, 0x7, 0x7, 0x98, "0e4a22547e679cd6597b0232088b226290c35d237203b285b37e5554fef03012ccb8a14e52a5a69c780723a3fd13b48f47f39a1aa7ee2e5f128017d5958dacaaa7965b7fc1137901e1a41c7cf86bd14f3bb13143a492656cbffe92cbbf7a5c0ca5e463bf8d969078eb9860baca770ae2234230a7560c19951f1c2da24a218f5e26eae83a8fec2dc06986b8e5a629aa981c887adb5d62f02d"}}, 0xa4) mkdirat(r3, &(0x7f0000001480)='./file0\x00', 0x8) (async) syz_io_uring_setup(0x4a05, &(0x7f00000014c0)={0x0, 0x12f4, 0x800, 0x2, 0x2cb, 0x0, r3}, &(0x7f0000001540)=0x0, &(0x7f0000001580)) (async) r6 = syz_io_uring_setup(0x302a, &(0x7f00000015c0)={0x0, 0x29e5, 0x188, 0x0, 0x23a, 0x0, r3}, &(0x7f0000001640), &(0x7f0000001680)=0x0) (async, rerun: 32) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r5, r7, &(0x7f00000016c0)=@IORING_OP_FALLOCATE={0x11, 0x47, 0x0, @fd_index=0x1, 0x9, 0x0, 0x3, 0x0, 0x1, {0x0, r8}}) (async) syz_usb_connect(0x3, 0x509, &(0x7f0000001700)={{0x12, 0x1, 0x310, 0x2e, 0x6c, 0x17, 0x8, 0x9710, 0x7730, 0xd16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f7, 0x1, 0x8, 0x68, 0x20, 0x1, [{{0x9, 0x4, 0xf7, 0x4b, 0xe, 0xe4, 0x5c, 0x65, 0x9, [], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0x7, 0x1, 0xb}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x2, 0xe, 0x4}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x9, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x4, 0x8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x2}, @generic={0x37, 0xe, "9be0a91a19be1d490d3e3d76747300df5a1b88f2a6402eda00b6227519d2d34fce654d0c8fbde4a882488ca11711b535adf5e45499"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x6, 0x7, 0xe7, [@generic={0x79, 0x10, "3143f966548996cbc34f66fa32830002fc9428a2f70dd9438e4d4c337acc96b509f1f73aeb8bbefe7a76ce2f8b9228b489b6b1931ec3aaf6f06bacedffdf4740ec37a9754597527413561144abc26c43780e1f325d3918676573e81c298e6849c552e90920e6d162ec1ed6a0fbc9f4b247b44d627e3b93"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x10, 0xd, 0x5, 0x57, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}, @generic={0x9b, 0x25, "c766b49a5827e9eb3b843aa5eca9c4fb86e097f9be7488fe64a9824e992323dcd467cb0392ee8f6682dcdb631e3b9dc469b88ca689ce586c951678fabd991c211e9d4b24674c2940d8c4be38076c089aca439df3db3daa9c4f6ef46147f6cc26e03b70068428b80b4a728380b77d86ff2d79ee7b578bec91281ea6575a8e398568a3970e36809266b3734f17f713fcbc15635dcd77759ecff2"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x0, 0xe9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x4, 0x1d, 0x8, [@generic={0xb6, 0xe, "8e6ab2edb46c35ff44d11bdb8859f9059743b4287bd73001dd6c1ff96a6e2cb4500b5a6f22cbfc6f41f45d99e60fa7fb4d13098f10d4cd100300b9d07d58a5d1b1469aadb36d6d02f890e95295295bc51c36d844b3dd621f56da10f5a5726fba7df53f800a478ae602fbaf7cdf0879255e25e6817dd9774f2517d660c9a075afa1be1313e69cb4ccbb1021ce8e3c34da6fd3d0f03b0a2c73c1714812df3ab4e5ad48060bfeb522d95920bacae33561b250e51f58"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x4, 0xe6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xa}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x7, 0xff, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x5, 0x2, 0xe6, [@generic={0xfa, 0x6, "181b0faaaa32c681cc258fe48dc948cabc3dad08b73340987a152b7a455817d6f45ba6b30fd548e00b636cd92355d61d286c46cbc48cefa4737865e9101e1c9a6e7fe182f99ebe3bf93d9d0840b234aca37a6878902fd94bbe92f7f4c181f8a1285dd020a46e7f0b6434fed7000a15942f4bd779e112608cc264ae78fea62b22caf45cc1ff2d3dabeeaff286d1299e332f4b708980496dcc4a43afc6f71d964f3a26348895d530b529b1fde933d4c5c6c1ee1311e94f917952ef601200dc8d84eeb587791ed2785534f731940d36356a258757162eadfa7ba5c4d5ae3fabcacccfbdf1fd189b7d647e16ec3a0a8320b37393d85b7dc434dc"}, @generic={0xf4, 0xb, "b920257a7d621351970af8d13f54a2075a312daaceebdca0d69db8aa72f87b357f2872ad4d894e1b21d30f3011880d4051cb8ba8917cf4424a798f21292eb0453ff369b50db8e9888b821f60372428acaa434df186fa588fb852e36eb9864ce16010e86b7020192ce0e8edbc11f85a3d5505bff0777f7e74b1d7a3b855f549969e77d5bd7cdcc1dd6bcbded3d7248cad9fa36bace617039e748f25a1288f3cb219cbff3d45906b3c5a86788a35caee868b4452a74a071d43946365e3977bdad0c57611ed6a0a095c5c88511363e6fce59140c0536fd4f402667f5954af19ad75903c8321cc7d713efef2cd77ed02f95ed739"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x2, 0x5, 0x9, [@generic={0x40, 0x21, "196328a134f6dccf072d7e96b195bb0cac886b3ca5ac88a7632e66d7163f5d2310f657ad5400ca13da9994ea9809c86db05cb79d609e332350f7539f14bd"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x2, 0x7, 0xb}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x2, 0xd, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x59, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x1}]}}]}}]}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x200, 0x0, 0x6, 0x4, 0x10, 0x9}, 0x107, &(0x7f0000001c80)={0x5, 0xf, 0x107, 0x4, [@generic={0xdc, 0x10, 0x3, "2a7e4e4cdcc100c6036b3a4abb81aeb8c595845233840cc2414604f4b35af6aee5858e1573972722165f875c6c578772f0acaa5de3a9ee7cd9ecdb7dd52c2870dd3d63e8bc38edd13b5a83e7e16a8237e60ff832a6d3305a3bab74bb2b6aec051e5dba485d2be224ea7491934ead5f3becf506245834e28d30276680e8d0bd46d6dea9fc2272f564bce3ffed51c36df3a969b337d03291bb6629edccdb67513d73bc2269201a24a44b4bba01aa03673fd9f5bd7152656c9a505234f30cb77432ec131aa0693e7a72ad5ea3340a50bf8050eca13d9cf015eeb5"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x7, 0xf000, 0x2, [0xff000f, 0xff3f0f, 0xffffc0]}, @ext_cap={0x7, 0x10, 0x2, 0x5, 0xf, 0x7, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x1, 0x3}]}, 0x6, [{0xde, &(0x7f0000001dc0)=@string={0xde, 0x3, "9dce6d0f625c6e58f21ace8ef8baad9d2f58c4eafa8b5beffcf058c89a77c4a0c57455745a92dd7fa1ed271fa59ad96ad1210f41ca762e55a2b2bed741cca57b2cd608a6ba72e987d40002e91ba0de27b7372d95d22e651831ec7fa3fab8824efe39e1db5b67232c7196fadac9e9538630b9523dab5daa0ab58c666a198ec874f024b501b503bdd772129bd61f15e209e258bd6ea84592c48ca4d850f6fdd44b8ed2cc3342692990aae58d29822706093c4f8af69b2de9ec50ab2a6f0045f7be34451cfd9bef39dccfcad65be6c01b5226c7f370697c77da9b1558b8"}}, {0x4, &(0x7f0000001ec0)=@lang_id={0x4, 0x3, 0x415}}, {0x3c, &(0x7f0000001f00)=@string={0x3c, 0x3, "262ac3992ec3903c5ab0fa6f43c7997abebf79d9038743948cfd8fa93c3ddc16a2c0e6336ee977ab9e02235d8383f984916f52a12bfb4f42208e"}}, {0x35, &(0x7f0000001f40)=@string={0x35, 0x3, "79d7c9e8ccd69ec69f357e02d73d31937fafbbfb700f000f1d1051e11942e79da788904d267902abb9aa998a905103e5550d72"}}, {0x2e, &(0x7f0000001f80)=@string={0x2e, 0x3, "ff1a13ad3e52ee0711f2495952008bca76c925dde2ddfdce5d88e85496e82b8c574630996c8a0eddee6671de"}}, {0x5f, &(0x7f0000001fc0)=@string={0x5f, 0x3, "05e8ac461e21d0286122becd9d81237d21e3d7162ec00eb22c14dfd8cb5dae720638a1ed6d9c80e39c3d0989c234d2e7875a29f0c8938c43d7a10131762c1302064a66ac87beb89286b9455f141f3fdb66e382fe361eea6fd2476ad700"}}]}) (async) syz_io_uring_setup(0x6516, &(0x7f00000020c0)={0x0, 0xae96, 0x20, 0x2, 0x1b9, 0x0, r6}, &(0x7f0000002140), &(0x7f0000002180)) (async) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000002200)=@get={0x1, &(0x7f00000021c0), 0x3}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffff0000) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x3) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000002240)={0x3, {{0xa, 0x4e23, 0xff, @private0}}, 0x1, 0x1, [{{0xa, 0x4e20, 0x5, @mcast1, 0x4}}]}, 0x110) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000002380)={0x5, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000025c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002580)={&(0x7f00000024c0)={0x90, r9, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x14}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x90}, 0x1, 0x0, 0x0, 0x44000}, 0x800) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002640), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000027c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002780)={&(0x7f0000002680)={0xd4, r10, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44080}, 0x20000005) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000029c0)={0xdc74, 0x0, &(0x7f0000002940)=[{&(0x7f0000002840)=""/233, 0xe9}], &(0x7f0000002980)=[0x3, 0x633, 0x915, 0xc1c, 0x9], 0x1}, 0x20) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002a80)=[@text16={0x10, &(0x7f0000002a00)="6766c7442400040000006766c74424022d0000006766c744240600000000670f01142464360fd11b65670f01c5ba4300ed0f01c9de8cfe75660f3a0bb8231ce166b8000000000f23c80f21f866350000b0000f23f8ba210066ed0f01c3", 0x5d}], 0x1, 0x40, &(0x7f0000002ac0)=[@cr4={0x1, 0x40c}], 0x1) 4.446345834s ago: executing program 5 (id=913): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) 4.024017234s ago: executing program 2 (id=914): socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000340)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x20, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a67c6024"}, 0x10, 0x1, {0x0}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) 3.175894914s ago: executing program 0 (id=915): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x76, &(0x7f0000000140)=@assoc_value, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, &(0x7f0000000280)={0xa, 0x0, 0x1, @remote, 0x1}, 0x1c) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7fee}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000000)={0x210a, r7}, 0x0) landlock_restrict_self(r8, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') ioctl$I2C_PEC(r1, 0x708, 0x10) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000902240001008cb0090904004bcb44487a9c089f1b6d0101030003000921fbff01012207000905810300047e0d00"/64], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={0x0}, 0x1) 2.775713782s ago: executing program 5 (id=916): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000110005000000000000000000070000", @ANYRES32, @ANYBLOB="00000000000000000c001a80080005800400"], 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="7684f222bdac5555d8f51a8fb1fe230b889c89ce4fe5dd5a3a77b6514a454d127a5906203b8dcb063d12821a8e133f6d3e70d7d4c300ac1c7f81af3ccf8b841cc8e29bf0532c557b3bed6a3c6564b74b8b6505628a2e4fc69dbf90ba8acc545f3c6de0799e1dd28ce62b36b7aeade006a764cac0724515244a909ade98177a986d0b815a781c70b411d0138a74e6adeff49f6f5b8445145faa75279e2ef81b2d36cd54397117a596b6b3202896cc70fec826530d582aa98314"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.723408798s ago: executing program 2 (id=917): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x22, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000480), &(0x7f0000000180)='%+9llu \x00', 0x2}, 0x20) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r6, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.488893085s ago: executing program 4 (id=918): unshare(0x2c000080) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x2) mknodat(0xffffffffffffffff, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x24, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x48080) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) setrlimit(0x9, 0x0) 2.318712282s ago: executing program 2 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$amidi(&(0x7f0000000080), 0x0, 0x402000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x1, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x400000, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$amidi(&(0x7f0000000080), 0x0, 0x402000) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x1, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x400000, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) 2.131149961s ago: executing program 3 (id=920): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000014c0)={0x8, 0x0, [{0xe6e45004, 0x1000, &(0x7f0000000040)=""/4096}, {0x6000, 0x34, &(0x7f0000001040)=""/52}, {0x4000, 0xe8, &(0x7f0000001080)=""/232}, {0x8080000, 0x1a, &(0x7f0000001180)=""/26}, {0x2, 0x53, &(0x7f00000011c0)=""/83}, {0x2, 0xfe, &(0x7f0000001240)=""/254}, {0xf000, 0x4c, &(0x7f0000001340)=""/76}, {0x6000, 0xef, &(0x7f00000013c0)=""/239}]}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001600)={{0x1, 0x1, 0x18, r0, {0x2a49}}, './file0\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000001640)={0x3795, 0x1, 0x1b, "1081b8b587b13f00051725b128a20cacc253e26d20675fbec1ee3a3ab7fd4397d7619a2c0480207a492cbab9dbbd54c40a761ce3ed7b05d5515ed0a6", 0xc, "5af45916ac94e7ebe564c808c2ea381d3fff57940866656b6dd68c4fdfcfed29a075b5ef42c478095f91626c83cfad3dee32f98ced8c2c6f58b1f064", 0xa0}) ppoll(&(0x7f0000001700)=[{r1, 0xa090}, {r1, 0xa21}], 0x2, &(0x7f0000001740)={0x77359400}, &(0x7f0000001780)={[0xfff]}, 0x8) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000017c0)={0xfffffffffffffffc, 0xffff1000, 0x2, r1}) (async) write$6lowpan_control(r1, &(0x7f0000001800)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001840)={r1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001880)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x6, 0x2, 0x4ec6, 0x4, 0x44, 0x7, 0x7}, &(0x7f0000001940)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000001980)={r4, 0x9}, 0x8) (async) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a00)={0xc8, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x318f}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x45}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) (async) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000001b80)=0x1) (async) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0xa, &(0x7f0000ffe000/0x2000)=nil) (async) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x7) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000001c00)={0xb2a5, 0x10, '\x00', 0x0, &(0x7f0000001bc0)=[0x0, 0x0]}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000001c40)={"512bc1c0af9f22d4d0383762ba3b6db90e6f8676453e02a5d27527597166", 0x5b, 0xc, 0x0, [0x10001, 0x1, 0x515, 0x9, 0xd1e0, 0x1, 0x7f, 0x101, 0x1, 0xfffffffd, 0x40e3, 0x600, 0x6, 0x1, 0xb, 0x40000000, 0x5, 0xba73]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x58, r5, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10000, 0x53}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xda}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x800) r7 = gettid() getpgid(r7) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x60, 0x0, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x10) (async) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000020c0)={0x7, @raw_data="e218628f2f5d588f4d443596adab322ae532d14467762c5b8211cbf1aafc97c423fe9172cbe73afccc4976b5543e104732ffdc7d54781b5472a854d58489b09664240a25dfd7e6d55c5baf34327c38a9c1aa0a665f8c75c6b9de04a5ecbeec2268c1939d480eb478739c0070ab32d8ca9e3f48e54d3f4873ef4b7654350c77385dcc6bc7876870ebff0c129ddcad94c603e0bab0fac948986c71b833fcd0cee9d8f1332231ac9e0fd11def16dbebf8e11e9a9b748d70e1aae40b0cca93e92c05290b326e3121a318"}) (async) write$cgroup_subtree(r3, &(0x7f00000021c0)={[{0x2d, 'net_prio'}, {0xf99d9d2fdd80751b, 'cpuset'}]}, 0x12) (async) setxattr$incfs_size(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240), &(0x7f0000002280)=0x9ea4, 0x8, 0x2) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000022c0)={0x7, 0xeeee8000, 0x0, r1, 0x19f11ef296586573}) 1.956682518s ago: executing program 3 (id=921): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) (async) r2 = socket(0x1d, 0x2, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000300)=0x8) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f0000000180)={0x20, r4, 0x1, 0x0, &(0x7f0000000600)=[{}]}) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}], 0x206c, 0x0) (async) sendmsg$can_j1939(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)="f4e78d4837b4c64b7bce30d85066e820619c9624346344714b2b454ea8f4eef1584fbfa34491c5c24c7b75198d6f0f7b69933483ee784106987e85d5f2a77f21d1c0cb9eb183e1a76d856e5ebd44bf761e52cefa49f6232ab391b4625ed815a87d9eed921d95eaf0cfb3eb3a921c34394f5fe05b9effc5", 0x77}, 0x1, 0x0, 0x0, 0x20048000}, 0x810) (async) socket(0x400000000010, 0x3, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (async) poll(&(0x7f0000000200), 0x51, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@mcast1, 0x80ffffd, 0x0, 0xfd, 0xa, 0x7f, 0x7}, 0x20) (async) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @value=0x100}}) (async) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x2}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 1.554640102s ago: executing program 2 (id=922): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = fanotify_init(0x202, 0x1000) fanotify_mark(r3, 0x1, 0x48000013, r2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x0, 0x0, 0x0) 929.358264ms ago: executing program 3 (id=923): memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x7fff, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x800, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xc41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff951d, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x76e, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x45d0852c, 0xffffffff, 0x4, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x6, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400, 0xd}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040), &(0x7f0000000080)) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) 330.997676ms ago: executing program 3 (id=924): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad83700398d1c7d7982b8f57fb20a3adc9", 0x1b, 0xfffffffffffffffe) (async) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffe86, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 0 (id=925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x541b, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40010) kernel console output (not intermixed with test programs): sy [ 179.311433][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.880896][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 180.195088][ T7258] usb usb9: usbfs: process 7258 (syz.0.261) did not claim interface 0 before use [ 180.221908][ T7258] ptrace attach of "./syz-executor exec"[5862] was attempted by ""[7258] [ 180.616250][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 180.808323][ T24] usb 2-1: config 0 has no interfaces? [ 180.837733][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 180.858964][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.885138][ T24] usb 2-1: Product: syz [ 180.903384][ T24] usb 2-1: Manufacturer: syz [ 180.919259][ T24] usb 2-1: SerialNumber: syz [ 180.956009][ T24] usb 2-1: config 0 descriptor?? [ 180.999209][ T24] usb 3-1: USB disconnect, device number 15 [ 183.899288][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 185.088502][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 185.341581][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 185.415796][ T9] usb 5-1: config 0 has no interfaces? [ 185.435922][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 185.480914][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.511522][ T9] usb 5-1: Product: syz [ 185.527114][ T9] usb 5-1: Manufacturer: syz [ 185.545005][ T9] usb 5-1: SerialNumber: syz [ 185.563996][ T9] usb 5-1: config 0 descriptor?? [ 186.138194][ T7366] tipc: Enabled bearer , priority 0 [ 186.220622][ T7359] syz.0.276 (7359): drop_caches: 2 [ 186.237503][ T7369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.280371][ T7366] tipc: Disabling bearer [ 186.338362][ T7369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.630886][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'. [ 186.688430][ T3095] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 186.899688][ T3095] usb 1-1: config index 0 descriptor too short (expected 1090, got 36) [ 186.915866][ T3095] usb 1-1: config 241 has too many interfaces: 207, using maximum allowed: 32 [ 186.984288][ T3095] usb 1-1: config 241 has an invalid descriptor of length 187, skipping remainder of the config [ 187.010357][ T3095] usb 1-1: config 241 has 0 interfaces, different from the descriptor's value: 207 [ 187.049344][ T3095] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 187.094731][ T3095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.190181][ T7383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.375597][ T3095] usb 1-1: string descriptor 0 read error: -71 [ 187.405902][ T3095] usb 1-1: USB disconnect, device number 20 [ 188.400037][ T3095] usb 5-1: USB disconnect, device number 16 [ 188.625837][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 188.786000][ T9] usb 1-1: device descriptor read/64, error -71 [ 189.026563][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 189.165999][ T9] usb 1-1: device descriptor read/64, error -71 [ 189.296270][ T9] usb usb1-port1: attempt power cycle [ 189.655835][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 189.676050][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 189.717294][ T9] usb 1-1: device descriptor read/8, error -71 [ 189.879581][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 189.896737][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 189.910129][ T24] usb 3-1: config 0 has no interface number 0 [ 189.945215][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 189.961851][ T7403] netlink: 71 bytes leftover after parsing attributes in process `syz.4.288'. [ 189.976492][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 190.006298][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.017750][ T9] usb 1-1: device descriptor read/8, error -71 [ 190.022284][ T24] usb 3-1: Product: syz [ 190.047827][ T24] usb 3-1: Manufacturer: syz [ 190.065964][ T24] usb 3-1: SerialNumber: syz [ 190.077856][ T10] usb 2-1: USB disconnect, device number 20 [ 190.081336][ T24] usb 3-1: config 0 descriptor?? [ 190.123092][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 190.141577][ T9] usb usb1-port1: unable to enumerate USB device [ 190.427023][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 190.469674][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 190.854282][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'. [ 191.054669][ T7412] hub 9-0:1.0: USB hub found [ 191.064192][ T7412] hub 9-0:1.0: 1 port detected [ 191.324691][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 191.325151][ T3095] usb 3-1: USB disconnect, device number 16 [ 191.381174][ T3095] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 191.482070][ T3095] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 191.526637][ T3095] quatech2 3-1:0.51: device disconnected [ 191.726539][ T7422] netlink: 36 bytes leftover after parsing attributes in process `syz.0.292'. [ 192.134409][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.217599][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.265821][ T5934] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 192.356195][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 192.476170][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 192.491290][ T7432] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.507951][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.535816][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 192.541052][ T5934] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 192.559627][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 122, changing to 10 [ 192.593416][ T5934] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 192.605326][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24801, setting to 1024 [ 192.625983][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.644368][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 192.654343][ T5934] usb 1-1: Product: syz [ 192.663388][ T5934] usb 1-1: Manufacturer: syz [ 192.672475][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.689666][ T5934] usb 1-1: SerialNumber: syz [ 192.731664][ T5934] usb 1-1: config 0 descriptor?? [ 192.745327][ T24] usb 3-1: config 0 descriptor?? [ 192.994599][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 193.070872][ T24] usb 3-1: USB disconnect, device number 17 [ 193.366641][ T7442] netlink: 'syz.4.299': attribute type 11 has an invalid length. [ 193.790486][ T30] audit: type=1326 audit(1753719214.747:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.2.301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2af978e9a9 code=0x0 [ 194.379022][ T3095] usb 1-1: USB disconnect, device number 25 [ 196.266155][ T24] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 196.468940][ T24] usb 5-1: config 0 has no interfaces? [ 196.478606][ T24] usb 5-1: config 0 has no interfaces? [ 196.486395][ T24] usb 5-1: config 0 has no interfaces? [ 196.515030][ T24] usb 5-1: string descriptor 0 read error: -22 [ 196.524823][ T24] usb 5-1: New USB device found, idVendor=c11f, idProduct=aaef, bcdDevice=21.41 [ 196.545388][ T24] usb 5-1: New USB device strings: Mfr=224, Product=229, SerialNumber=3 [ 196.585949][ T24] usb 5-1: config 0 descriptor?? [ 196.625854][ T5951] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 196.779379][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.796261][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.806974][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.837122][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.846479][ T5859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.875990][ T5951] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.930084][ T5951] usb 3-1: config 106 has an invalid interface number: 33 but max is 0 [ 196.968030][ T7343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.988278][ T5951] usb 3-1: config 106 has no interface number 0 [ 196.994906][ T5951] usb 3-1: config 106 interface 33 has no altsetting 0 [ 197.020341][ T24] usb 5-1: USB disconnect, device number 18 [ 197.124746][ T7343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.151790][ T5951] usb 3-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 9.b9 [ 197.176194][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.213733][ T5951] usb 3-1: Product: syz [ 197.238699][ T5951] usb 3-1: Manufacturer: syz [ 197.284404][ T5951] usb 3-1: SerialNumber: syz [ 197.395510][ T7343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.496660][ T7495] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 197.529411][ T5951] ums-sddr55 3-1:106.33: USB Mass Storage device detected [ 197.548401][ T7343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.598597][ T5951] ums-sddr55 3-1:106.33: Quirks match for vid 07c4 pid a103: 8 [ 197.689094][ T5951] usb 3-1: USB disconnect, device number 18 [ 197.962134][ T7262] syz.1.262 (7262) used greatest stack depth: 18568 bytes left [ 198.159908][ T7493] chnl_net:caif_netlink_parms(): no params data found [ 198.179464][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 198.206100][ T3095] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 198.278094][ T7343] bridge_slave_1: left allmulticast mode [ 198.284125][ T7343] bridge_slave_1: left promiscuous mode [ 198.292089][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.309243][ T7343] bridge_slave_0: left allmulticast mode [ 198.315159][ T7343] bridge_slave_0: left promiscuous mode [ 198.321488][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.348826][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 198.363737][ T10] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 198.374954][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.384561][ T3095] usb 1-1: Using ep0 maxpacket: 16 [ 198.390525][ T10] usb 5-1: Product: syz [ 198.395521][ T10] usb 5-1: Manufacturer: syz [ 198.401804][ T10] usb 5-1: SerialNumber: syz [ 198.408677][ T3095] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 198.418379][ T3095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.431342][ T10] usb 5-1: config 0 descriptor?? [ 198.436818][ T3095] usb 1-1: Product: syz [ 198.443128][ T3095] usb 1-1: Manufacturer: syz [ 198.463701][ T3095] usb 1-1: SerialNumber: syz [ 198.473845][ T10] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -32 [ 198.488015][ T3095] usb 1-1: config 0 descriptor?? [ 198.508787][ T3095] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 198.653298][ T24] usb 5-1: USB disconnect, device number 19 [ 198.768484][ T3095] gspca_sn9c2028: read1 error -32 [ 198.804363][ T3095] gspca_sn9c2028: read1 error -32 [ 198.947147][ T5857] Bluetooth: hci4: command tx timeout [ 199.530728][ T7535] loop9: detected capacity change from 0 to 7 [ 199.560686][ T7181] Dev loop9: unable to read RDB block 7 [ 199.577688][ T7181] loop9: unable to read partition table [ 199.599227][ T7181] loop9: partition table beyond EOD, truncated [ 199.629642][ T7535] Dev loop9: unable to read RDB block 7 [ 199.635449][ T7535] loop9: unable to read partition table [ 199.645564][ T7535] loop9: partition table beyond EOD, truncated [ 199.653217][ T7343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.663545][ T7535] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 199.696826][ T7343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.716963][ T7343] bond0 (unregistering): Released all slaves [ 199.845804][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.852284][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.009648][ T7343] tipc: Left network mode [ 200.467639][ T5951] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 200.668839][ T5951] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 200.690237][ T5951] usb 3-1: config 0 has no interface number 0 [ 200.714632][ T5951] usb 3-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 200.738563][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.753728][ T5951] usb 3-1: Product: syz [ 200.760736][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.768779][ T5951] usb 3-1: Manufacturer: syz [ 200.773753][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.781316][ T5951] usb 3-1: SerialNumber: syz [ 200.790672][ T7493] bridge_slave_0: entered allmulticast mode [ 200.800516][ T5951] usb 3-1: config 0 descriptor?? [ 200.831816][ T7493] bridge_slave_0: entered promiscuous mode [ 200.835573][ T5951] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 200.855184][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.876818][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.885069][ T7493] bridge_slave_1: entered allmulticast mode [ 200.908420][ T7493] bridge_slave_1: entered promiscuous mode [ 201.035627][ T5857] Bluetooth: hci4: command tx timeout [ 201.080648][ T980] usb 1-1: USB disconnect, device number 26 [ 201.241771][ T7343] hsr_slave_0: left promiscuous mode [ 201.297946][ T5951] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 201.335892][ T5951] gspca_pac7302 3-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 201.365251][ T7343] hsr_slave_1: left promiscuous mode [ 201.414541][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.466769][ T5951] usb 3-1: USB disconnect, device number 19 [ 201.492145][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.611783][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.663433][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.786174][ T7343] veth1_macvtap: left promiscuous mode [ 201.800635][ T7343] veth0_macvtap: left promiscuous mode [ 201.815335][ T7343] veth1_vlan: left promiscuous mode [ 201.832339][ T7343] veth0_vlan: left promiscuous mode [ 203.075873][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 203.105841][ T5857] Bluetooth: hci4: command tx timeout [ 203.217850][ T24] usb 5-1: device descriptor read/64, error -71 [ 203.467733][ T7343] team0 (unregistering): Port device team_slave_1 removed [ 203.498711][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 203.651444][ T24] usb 5-1: device descriptor read/64, error -71 [ 203.759998][ T7343] team0 (unregistering): Port device team_slave_0 removed [ 203.769505][ T24] usb usb5-port1: attempt power cycle [ 204.135858][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 204.174615][ T24] usb 5-1: device descriptor read/8, error -71 [ 204.447134][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 204.502934][ T24] usb 5-1: device descriptor read/8, error -71 [ 204.637981][ T24] usb usb5-port1: unable to enumerate USB device [ 205.185874][ T5857] Bluetooth: hci4: command tx timeout [ 205.211490][ T7612] loop9: detected capacity change from 0 to 7 [ 205.235483][ T7612] Dev loop9: unable to read RDB block 7 [ 205.249486][ T7612] loop9: unable to read partition table [ 205.270521][ T7612] loop9: partition table beyond EOD, truncated [ 205.308465][ T7612] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 205.524805][ T7493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.574329][ T7493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.849262][ T7493] team0: Port device team_slave_0 added [ 205.889177][ T7493] team0: Port device team_slave_1 added [ 206.074954][ T7618] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.180122][ T7617] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 206.272618][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.307151][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.419898][ T7493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.887955][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 206.980126][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.124509][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.162332][ T24] usb 5-1: config 0 has no interfaces? [ 207.170051][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.193286][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.211395][ T24] usb 5-1: config 0 descriptor?? [ 207.251954][ T7493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.131063][ T7493] hsr_slave_0: entered promiscuous mode [ 208.149519][ T7493] hsr_slave_1: entered promiscuous mode [ 208.172536][ T7659] xt_hashlimit: size too large, truncated to 1048576 [ 208.183779][ T7493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.205412][ T7493] Cannot create hsr debugfs directory [ 208.300159][ T7343] IPVS: stop unused estimator thread 0... [ 210.358781][ T7493] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 210.408236][ T3095] usb 5-1: USB disconnect, device number 24 [ 210.475561][ T7493] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.502288][ T7677] loop9: detected capacity change from 0 to 7 [ 210.543790][ T7493] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.575545][ T7677] Dev loop9: unable to read RDB block 7 [ 210.600122][ T7493] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.646382][ T7677] loop9: unable to read partition table [ 210.658843][ T7677] loop9: partition table beyond EOD, truncated [ 210.675872][ T7677] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 211.589666][ T7493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.633485][ T7705] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 211.661556][ T7705] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 211.702413][ T7705] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 212.044372][ T7493] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.119916][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.127440][ T7329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.202085][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.209493][ T7329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.555352][ T7727] pim6reg: entered allmulticast mode [ 212.575919][ T980] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 212.626692][ T7493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.720270][ T980] usb 1-1: device descriptor read/64, error -71 [ 212.752140][ T7493] veth0_vlan: entered promiscuous mode [ 212.796984][ T7493] veth1_vlan: entered promiscuous mode [ 212.897830][ T7493] veth0_macvtap: entered promiscuous mode [ 212.953321][ T7493] veth1_macvtap: entered promiscuous mode [ 212.978150][ T980] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 213.042770][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.072273][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.111934][ T7493] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.131434][ T7493] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.135973][ T980] usb 1-1: device descriptor read/64, error -71 [ 213.141366][ T7493] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.156805][ T7493] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.282702][ T980] usb usb1-port1: attempt power cycle [ 213.306035][ T5907] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 213.333209][ T7343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.364652][ T7343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.448177][ T7351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.476141][ T7351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.486196][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 213.510141][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.539932][ T5907] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 213.579092][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.608774][ T5907] usb 3-1: config 0 descriptor?? [ 213.656982][ T980] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 213.719305][ T980] usb 1-1: device descriptor read/8, error -71 [ 213.966254][ T980] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 214.029923][ T5907] hid-multitouch 0003:0EEF:72C4.0002: unknown main item tag 0x0 [ 214.050120][ T980] usb 1-1: device descriptor read/8, error -71 [ 214.104797][ T5907] hid-multitouch 0003:0EEF:72C4.0002: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 214.186717][ T980] usb usb1-port1: unable to enumerate USB device [ 214.891643][ T980] usb 3-1: USB disconnect, device number 20 [ 215.397387][ T980] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 215.595871][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 215.639072][ T980] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 215.687815][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.743376][ T980] usb 3-1: Product: syz [ 215.763727][ T980] usb 3-1: Manufacturer: syz [ 215.788635][ T980] usb 3-1: SerialNumber: syz [ 215.848978][ T980] usb 3-1: config 0 descriptor?? [ 215.894332][ T980] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 216.459888][ T7768] macvlan1: entered promiscuous mode [ 216.489032][ T7768] macvlan1: left promiscuous mode [ 217.927279][ T7809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.816035][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 218.954337][ T980] usb 3-1: clie_3_5_startup: get config number failed: -110 [ 218.966950][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.975905][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 218.999280][ T980] visor 3-1:0.0: probe with driver visor failed with error -110 [ 219.014886][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 219.030323][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.052798][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.116844][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.144919][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.170404][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.195904][ T24] usb 5-1: Product: syz [ 219.200501][ T24] usb 5-1: Manufacturer: syz [ 219.205420][ T24] usb 5-1: SerialNumber: syz [ 219.695886][ T24] usb 5-1: 0:2 : does not exist [ 220.166287][ T7843] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.209978][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.373'. [ 220.351571][ T5920] dvb-usb: did not find the firmware file 'dvb-usb-wt220u-fc03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 220.450769][ T5920] usb 4-1: USB disconnect, device number 13 [ 220.722477][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.736488][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.342830][ T24] usb 5-1: USB disconnect, device number 25 [ 221.407867][ T7866] ip6gre1: entered allmulticast mode [ 221.438714][ T7181] udevd[7181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.646993][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.684677][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.860111][ T7877] macsec0: entered promiscuous mode [ 221.866400][ T7877] macsec0: entered allmulticast mode [ 221.872201][ T7877] veth1_macvtap: entered allmulticast mode [ 222.175653][ T7890] netlink: 'syz.3.384': attribute type 21 has an invalid length. [ 222.194788][ T7890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.384'. [ 222.297082][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.385'. [ 222.346257][ T5907] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 222.391861][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 222.395853][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 222.399528][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 222.407027][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 222.467026][ T980] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 222.512668][ T5907] usb 5-1: device descriptor read/64, error -71 [ 222.668154][ T980] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 222.677529][ T980] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 222.699577][ T980] usb 4-1: config 135 has no interface number 0 [ 222.716634][ T980] usb 4-1: config 135 interface 230 has no altsetting 0 [ 222.737540][ T980] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 222.768871][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.776153][ T5907] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 222.794485][ T980] usb 4-1: Product: syz [ 222.804716][ T980] usb 4-1: Manufacturer: syz [ 222.816561][ T980] usb 4-1: SerialNumber: syz [ 222.957112][ T5907] usb 5-1: device descriptor read/64, error -71 [ 222.996116][ T10] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 223.066921][ T5907] usb usb5-port1: attempt power cycle [ 223.156279][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 223.168739][ T5920] usb 4-1: USB disconnect, device number 14 [ 223.306102][ T10] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 223.379249][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.418204][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.429411][ T5907] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 223.462162][ T5907] usb 5-1: device descriptor read/8, error -71 [ 223.485818][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 223.493489][ T10] usb usb6-port1: attempt power cycle [ 223.646105][ T5920] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 223.706050][ T5907] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 223.754286][ T5907] usb 5-1: device descriptor read/8, error -71 [ 223.797498][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 223.808459][ T5920] usb 1-1: config 0 has an invalid interface number: 61 but max is 1 [ 223.819000][ T5920] usb 1-1: config 0 has an invalid interface number: 98 but max is 1 [ 223.829274][ T5920] usb 1-1: config 0 has no interface number 0 [ 223.835435][ T5920] usb 1-1: config 0 has no interface number 1 [ 223.854291][ T5920] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 223.863800][ T10] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 223.876431][ T5907] usb usb5-port1: unable to enumerate USB device [ 223.885959][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.908413][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 223.919169][ T5920] usb 1-1: Product: syz [ 223.923448][ T5920] usb 1-1: Manufacturer: syz [ 223.956368][ T5920] usb 1-1: SerialNumber: syz [ 223.972411][ T5920] usb 1-1: config 0 descriptor?? [ 224.045897][ T10] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 224.098991][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 224.105315][ T5920] viperboard 1-1:0.61: version 0.00 found at bus 001 address 031 [ 224.118072][ T10] usb usb6-port1: unable to enumerate USB device [ 224.166285][ T5920] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 224.205798][ T5920] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 224.325814][ T5920] viperboard 1-1:0.98: version 0.00 found at bus 001 address 031 [ 224.380294][ T5920] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 224.420209][ T5920] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 224.730967][ T7959] loop9: detected capacity change from 0 to 7 [ 224.747453][ T7959] Dev loop9: unable to read RDB block 7 [ 224.753116][ T7959] loop9: unable to read partition table [ 224.764017][ T7959] loop9: partition table beyond EOD, truncated [ 224.770982][ T7959] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 225.080298][ T10] usb 1-1: USB disconnect, device number 31 [ 225.155936][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 225.353273][ T7971] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 225.399710][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 225.412249][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 225.431397][ T7972] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 225.476316][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 225.510168][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.595518][ T7980] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 225.622567][ T7980] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 225.636312][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 225.716523][ T7980] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.767461][ T44] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 225.825217][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.890782][ T44] usb 4-1: Product: syz [ 225.922179][ T44] usb 4-1: Manufacturer: syz [ 225.928171][ T44] usb 4-1: SerialNumber: syz [ 226.036727][ T44] usb 4-1: config 0 descriptor?? [ 226.106974][ T44] kvaser_usb 4-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 226.114499][ T44] kvaser_usb 4-1:0.0: error -EMSGSIZE: Failed to initialize card [ 226.123020][ T44] kvaser_usb 4-1:0.0: probe with driver kvaser_usb failed with error -90 [ 226.123058][ T10] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 226.312044][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.321023][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.421463][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 226.967700][ T10] usb 6-1: config 0 has no interface number 0 [ 226.974774][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 226.986854][ T5920] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 227.033309][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 227.047211][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 227.057435][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.074019][ T10] usb 6-1: config 0 descriptor?? [ 227.084678][ T7984] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 227.100559][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.129582][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 227.144778][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.153066][ T5951] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 227.191195][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 227.309389][ T5920] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 227.346176][ T5951] usb 1-1: device descriptor read/64, error -71 [ 227.406808][ T5920] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 227.439380][ T8001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.456058][ T8001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.464773][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.517950][ T5920] usb 5-1: Product: syz [ 227.522300][ T5920] usb 5-1: Manufacturer: syz [ 227.541937][ T5920] usb 5-1: SerialNumber: syz [ 227.575319][ T5920] usb 5-1: config 0 descriptor?? [ 227.587390][ T5920] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 227.600044][ T5920] usb 5-1: setting power ON [ 227.608613][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 227.637439][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 227.647226][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.655952][ T44] usb 6-1: USB disconnect, device number 6 [ 227.659255][ T5920] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 227.672543][ T5920] usb 5-1: media controller created [ 227.805827][ T5951] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 227.903293][ T7992] dvb-usb: bulk message failed: -22 (4/0) [ 227.920561][ T7992] cxusb: i2c read failed [ 227.965807][ T5951] usb 1-1: device descriptor read/64, error -71 [ 228.040356][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.086166][ T5951] usb usb1-port1: attempt power cycle [ 228.142683][ T5920] usb 5-1: selecting invalid altsetting 6 [ 228.185961][ T5920] usb 5-1: digital interface selection failed (-22) [ 228.212105][ T5920] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 228.243372][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.272821][ T5920] usb 5-1: setting power OFF [ 228.297513][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.312326][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 228.335984][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 228.395031][ T5920] (NULL device *): no alternate interface [ 228.435862][ T5951] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 228.530376][ T5951] usb 1-1: device descriptor read/8, error -71 [ 228.585449][ T10] usb 4-1: USB disconnect, device number 15 [ 228.663080][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.715798][ T44] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 228.716296][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.845932][ T5951] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 228.890878][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 228.913000][ T5951] usb 1-1: device descriptor read/8, error -71 [ 228.931831][ T44] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 228.974625][ T44] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 229.015834][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.037323][ T5951] usb usb1-port1: unable to enumerate USB device [ 229.067621][ T44] usb 6-1: Product: syz [ 229.082176][ T44] usb 6-1: Manufacturer: syz [ 229.105404][ T44] usb 6-1: SerialNumber: syz [ 229.131775][ T44] usb 6-1: config 0 descriptor?? [ 229.151334][ T8011] raw-gadget.6 gadget.5: fail, usb_ep_enable returned -22 [ 229.172422][ T44] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 229.483415][ T10] usb 6-1: USB disconnect, device number 7 [ 229.483501][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 229.586396][ T8039] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 229.594243][ T8039] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.130718][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 230.154588][ T8057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.206254][ T8057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.339528][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.392566][ T9] usb 1-1: config 1 has no interface number 0 [ 230.423209][ T8059] kAFS: unparsable volume name [ 230.425366][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.484142][ T9] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 230.528890][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 230.580848][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.626055][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.689143][ T9] usb 1-1: Product: syz [ 230.710740][ T9] usb 1-1: Manufacturer: syz [ 230.729537][ T9] usb 1-1: SerialNumber: syz [ 231.150348][ T8081] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 231.201417][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 231.222416][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 231.246378][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 231.266646][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 231.286214][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 231.306342][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 231.347615][ T8084] loop9: detected capacity change from 0 to 7 [ 231.374396][ T8079] netlink: 'syz.0.418': attribute type 3 has an invalid length. [ 231.383338][ T8084] Dev loop9: unable to read RDB block 7 [ 231.415283][ T8084] loop9: unable to read partition table [ 231.444523][ T8084] loop9: partition table beyond EOD, truncated [ 231.486900][ T8084] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 231.768258][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 231.936676][ T10] usb 6-1: device descriptor read/64, error -71 [ 231.954856][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.965268][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.008649][ T8099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.020746][ T8099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.186455][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 232.325894][ T10] usb 6-1: device descriptor read/64, error -71 [ 232.439345][ T10] usb usb6-port1: attempt power cycle [ 232.764801][ T8115] pim6reg: entered allmulticast mode [ 232.775214][ T8115] pim6reg: left allmulticast mode [ 232.805814][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 232.852825][ T10] usb 6-1: device descriptor read/8, error -71 [ 232.973918][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.981982][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.018752][ T8117] bridge0: entered allmulticast mode [ 233.106111][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 233.128744][ T9] cdc_ncm 1-1:1.1: bind() failure [ 233.137998][ T10] usb 6-1: device descriptor read/8, error -71 [ 233.167196][ T9] usb 1-1: USB disconnect, device number 36 [ 233.272637][ T30] audit: type=1326 audit(1753719254.227:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 233.314584][ T10] usb usb6-port1: unable to enumerate USB device [ 233.342828][ T30] audit: type=1326 audit(1753719254.257:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 233.604886][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.680281][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.909121][ T9] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 234.045921][ T9] usb 1-1: device descriptor read/64, error -71 [ 234.295877][ T9] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 234.465931][ T9] usb 1-1: device descriptor read/64, error -71 [ 234.614431][ T9] usb usb1-port1: attempt power cycle [ 234.744869][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 234.937922][ T10] usb 4-1: config 0 has an invalid interface number: 90 but max is 0 [ 234.946707][ T10] usb 4-1: config 0 has no interface number 0 [ 234.957225][ T10] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f [ 234.977225][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.040638][ T10] usb 4-1: Product: syz [ 235.066215][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.5.445'. [ 235.096231][ T8167] netlink: 40 bytes leftover after parsing attributes in process `syz.5.445'. [ 235.111401][ T10] usb 4-1: Manufacturer: syz [ 235.118345][ T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 235.135974][ T10] usb 4-1: SerialNumber: syz [ 235.148519][ T9] usb 1-1: device descriptor read/8, error -71 [ 235.322407][ T10] usb 4-1: config 0 descriptor?? [ 235.535815][ T9] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 235.554037][ T10] cdc_subset 4-1:0.90: probe with driver cdc_subset failed with error -22 [ 235.606437][ T9] usb 1-1: device descriptor read/8, error -71 [ 235.743117][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.446'. [ 235.773134][ T9] usb usb1-port1: unable to enumerate USB device [ 236.418379][ T8149] netlink: 'syz.3.442': attribute type 9 has an invalid length. [ 236.526319][ T8149] netlink: 146708 bytes leftover after parsing attributes in process `syz.3.442'. [ 236.909036][ T24] usb 4-1: USB disconnect, device number 16 [ 237.385138][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.432023][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.507878][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.554834][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.671266][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.706538][ T8215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.718401][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.733936][ T8215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.783972][ T8190] loop2: detected capacity change from 0 to 7 [ 237.802842][ T8190] Dev loop2: unable to read RDB block 7 [ 237.813750][ T8190] loop2: AHDI p1 p2 p3 [ 237.818207][ T8190] loop2: partition table partially beyond EOD, truncated [ 237.827610][ T8190] loop2: p1 start 1601398130 is beyond EOD, truncated [ 237.834570][ T8190] loop2: p2 start 1702059890 is beyond EOD, truncated [ 238.333645][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 238.712285][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.749062][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.261001][ T8250] input: syz0 as /devices/virtual/input/input13 [ 241.675912][ T44] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 241.686472][ T8295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.716400][ T8295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.792519][ T8295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.805892][ T8295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.858288][ T8295] geneve2: entered promiscuous mode [ 241.870432][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 241.941585][ T44] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 241.962582][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.033451][ T44] usb 6-1: Product: syz [ 242.105801][ T44] usb 6-1: Manufacturer: syz [ 242.131317][ T44] usb 6-1: SerialNumber: syz [ 242.165055][ T44] usb 6-1: config 0 descriptor?? [ 242.295876][ T5951] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 242.310997][ T44] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 243.297507][ T8323] tipc: Started in network mode [ 243.322799][ T8323] tipc: Node identity fac5bc297f2e, cluster identity 4711 [ 243.389437][ T8323] tipc: Enabled bearer , priority 0 [ 243.532540][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.556251][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.585528][ T8323] tipc: Disabling bearer [ 243.776558][ T44] gspca_sonixj: reg_w1 err -110 [ 243.801154][ T8332] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 243.815856][ T44] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 243.930654][ T8332] bond1: entered promiscuous mode [ 243.941937][ T8332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 243.954698][ T8334] batman_adv: batadv0: Interface deactivated: dummy0 [ 243.971366][ T8334] batman_adv: batadv0: Removing interface: dummy0 [ 244.043813][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 244.645417][ T8354] input: syz1 as /devices/virtual/input/input14 [ 245.028590][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 245.042772][ T8369] syzkaller0: entered promiscuous mode [ 245.080806][ T8369] syzkaller0: entered allmulticast mode [ 245.149837][ T8367] tipc: Enabled bearer , priority 0 [ 245.627745][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 245.640991][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 245.671000][ T44] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 245.760878][ T5951] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 245.768975][ T8367] tipc: Resetting bearer [ 245.789155][ T980] usb 6-1: USB disconnect, device number 12 [ 245.821712][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.896001][ T44] usb 4-1: Product: syz [ 245.901939][ T8367] tipc: Disabling bearer [ 245.921051][ T44] usb 4-1: Manufacturer: syz [ 245.936921][ T44] usb 4-1: SerialNumber: syz [ 245.951600][ T44] usb 4-1: config 0 descriptor?? [ 245.957974][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 245.970297][ T5951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.007154][ T5951] usb 1-1: config 0 has no interfaces? [ 246.033051][ T8361] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 246.044080][ T5951] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.049705][ T8361] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 246.073598][ T5951] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.152108][ T5951] usb 1-1: Manufacturer: syz [ 246.180299][ T5951] usb 1-1: config 0 descriptor?? [ 246.264619][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.288142][ T8361] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 246.301294][ T8361] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 246.404723][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.792066][ T8392] fuse: Bad value for 'group_id' [ 246.797564][ T8392] fuse: Bad value for 'group_id' [ 247.009312][ T44] Error reading MAC address [ 247.135032][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 247.529395][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.623192][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.028103][ T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 248.201521][ T9] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 248.233241][ T9] usb 6-1: config 0 has no interface number 0 [ 248.261602][ T9] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 248.356532][ T9] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 248.450294][ T9] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64 [ 248.560566][ T9] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 248.599752][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.656089][ T9] usb 6-1: Product: syz [ 248.691943][ T9] usb 6-1: Manufacturer: syz [ 248.725507][ T9] usb 6-1: SerialNumber: syz [ 248.746207][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.769348][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.789915][ T5951] usb 1-1: USB disconnect, device number 41 [ 248.810125][ T9] usb 6-1: config 0 descriptor?? [ 248.830992][ T8408] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 248.838653][ T8408] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 248.868376][ T9] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 249.036720][ T9] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 249.075436][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.145590][ T9] usb 4-1: USB disconnect, device number 18 [ 249.228348][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.799976][ T44] usb 6-1: USB disconnect, device number 13 [ 249.926677][ T44] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 249.953302][ T44] cyberjack 6-1:0.69: device disconnected [ 250.197467][ T8434] block device autoloading is deprecated and will be removed. [ 250.250488][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.306376][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.419794][ T8449] syzkaller0: entered promiscuous mode [ 250.425588][ T8449] syzkaller0: entered allmulticast mode [ 250.575498][ T8446] tipc: Started in network mode [ 250.770545][ T8446] tipc: Node identity 1a18afe32a08, cluster identity 4711 [ 250.778463][ T8446] tipc: Enabled bearer , priority 0 [ 250.780163][ T8443] loop8: detected capacity change from 0 to 8 [ 250.820071][ T5863] Dev loop8: unable to read RDB block 8 [ 250.826225][ T5863] loop8: unable to read partition table [ 250.833356][ T5863] loop8: partition table beyond EOD, truncated [ 250.848348][ T8443] Dev loop8: unable to read RDB block 8 [ 250.856184][ T8443] loop8: unable to read partition table [ 250.862232][ T8443] loop8: partition table beyond EOD, truncated [ 250.876147][ T8443] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 250.971899][ T8445] tipc: Resetting bearer [ 251.036415][ T8445] tipc: Disabling bearer [ 253.078500][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.156673][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.878658][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 254.077719][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 94, changing to 10 [ 254.119873][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33258, setting to 1024 [ 254.152294][ T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 254.184518][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.233566][ T10] usb 1-1: config 0 descriptor?? [ 254.441193][ T8530] x_tables: duplicate underflow at hook 1 [ 254.711011][ T10] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 254.739149][ T10] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 254.766243][ T10] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 254.784058][ T10] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 254.845033][ T10] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 254.908664][ T10] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 254.969880][ T10] usb 1-1: USB disconnect, device number 42 [ 255.067182][ T8537] fido_id[8537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 256.732479][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.777887][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.830158][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.846764][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.871133][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.887026][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.900414][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.924912][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.934666][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.944458][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.056729][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 257.295882][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 257.320284][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 257.340372][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.395315][ T9] usb 4-1: config 0 descriptor?? [ 257.424772][ T3095] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 257.491405][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 257.613719][ T3095] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 257.760366][ T3095] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.827294][ T3095] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.868659][ T3095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.040834][ T3095] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 258.295872][ T3095] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 258.584649][ T9] gspca_sunplus: reg_r err -71 [ 258.590360][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 258.616089][ T9] usb 4-1: USB disconnect, device number 19 [ 259.237645][ T8581] netlink: 'syz.0.516': attribute type 11 has an invalid length. [ 259.886840][ T8593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.208025][ T8593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.720023][ T8601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'. [ 261.045055][ T3095] usb 6-1: USB disconnect, device number 14 [ 261.082141][ T8562] delete_channel: no stack [ 261.280628][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.287279][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.616154][ T8660] netlink: 36 bytes leftover after parsing attributes in process `syz.5.530'. [ 264.849254][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.986249][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.616900][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 265.890397][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 266.001161][ T10] usb 6-1: config 0 has an invalid interface number: 68 but max is 0 [ 266.043729][ T10] usb 6-1: config 0 has no interface number 0 [ 266.134114][ T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 266.205821][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.215588][ T10] usb 6-1: Product: syz [ 266.220274][ T10] usb 6-1: Manufacturer: syz [ 266.226128][ T10] usb 6-1: SerialNumber: syz [ 266.236186][ T10] usb 6-1: config 0 descriptor?? [ 266.309346][ T10] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 266.637352][ T44] usb 6-1: USB disconnect, device number 15 [ 266.657222][ T9162] netlink: 'syz.5.530': attribute type 23 has an invalid length. [ 266.665792][ T7343] usb 6-1: Failed to submit usb control message: -71 [ 266.711582][ T9177] netlink: 'syz.2.535': attribute type 10 has an invalid length. [ 266.735151][ T7343] usb 6-1: unable to send the bmi data to the device: -71 [ 266.764065][ T7343] usb 6-1: unable to get target info from device [ 266.785597][ T7343] usb 6-1: could not get target info (-71) [ 266.787529][ T9177] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 266.796156][ T7343] usb 6-1: could not probe fw (-71) [ 267.081045][ T9189] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 267.120438][ T9192] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 267.165928][ T9194] xt_hashlimit: size too large, truncated to 1048576 [ 267.363560][ T9200] fuse: Unknown parameter 'default_permissionsadsp1' [ 268.846144][ T30] audit: type=1326 audit(1753719289.607:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 269.050815][ T30] audit: type=1326 audit(1753719289.717:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 269.112679][ T30] audit: type=1326 audit(1753719289.747:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 269.135335][ T30] audit: type=1326 audit(1753719289.757:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad5858e9e3 code=0x7ffc0000 [ 269.167564][ T30] audit: type=1326 audit(1753719289.977:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad5858e9e3 code=0x7ffc0000 [ 269.215808][ T30] audit: type=1326 audit(1753719289.977:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 269.945402][ T30] audit: type=1326 audit(1753719289.977:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 270.191343][ T30] audit: type=1326 audit(1753719289.977:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 270.213757][ T5951] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 270.221887][ T30] audit: type=1326 audit(1753719289.977:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 270.246606][ T30] audit: type=1326 audit(1753719289.977:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9216 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5858e9a9 code=0x7ffc0000 [ 270.281196][ T9228] binder: 9227:9228 ioctl ae41 1 returned -22 [ 270.415980][ T5951] usb 6-1: Using ep0 maxpacket: 16 [ 270.425390][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.440795][ T5951] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 270.451038][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.603528][ T5951] usb 6-1: config 0 descriptor?? [ 271.021221][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.5.545'. [ 271.208676][ T9237] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 271.296365][ T5951] usbhid 6-1:0.0: can't add hid device: -71 [ 271.314928][ T5951] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 271.370750][ T5951] usb 6-1: USB disconnect, device number 16 [ 271.386013][ T980] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 271.536020][ T980] usb 1-1: device descriptor read/64, error -71 [ 271.594038][ T9248] xt_hashlimit: size too large, truncated to 1048576 [ 271.796419][ T980] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 271.956059][ T980] usb 1-1: device descriptor read/64, error -71 [ 272.005374][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.037820][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.079724][ T980] usb usb1-port1: attempt power cycle [ 272.226358][ T5951] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 272.497208][ T5951] usb 6-1: config 32 has an invalid interface number: 190 but max is 0 [ 272.514473][ T5951] usb 6-1: config 32 has no interface number 0 [ 272.525754][ T980] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 272.684157][ T5951] usb 6-1: config 32 interface 190 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 272.696746][ T5951] usb 6-1: New USB device found, idVendor=185b, idProduct=3082, bcdDevice=4a.97 [ 272.706697][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.716837][ T980] usb 1-1: device descriptor read/8, error -71 [ 272.993410][ T9] usb 6-1: USB disconnect, device number 17 [ 273.036366][ T980] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 273.056804][ T980] usb 1-1: device descriptor read/8, error -71 [ 273.197442][ T980] usb usb1-port1: unable to enumerate USB device [ 274.929705][ T3095] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 275.525775][ T3095] usb 6-1: Using ep0 maxpacket: 16 [ 275.536972][ T3095] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 275.558256][ T3095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 275.628247][ T3095] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.649023][ T3095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.864780][ T3095] usb 6-1: Product: syz [ 275.873701][ T3095] usb 6-1: Manufacturer: syz [ 275.881287][ T3095] usb 6-1: SerialNumber: syz [ 275.891566][ T3095] usb 6-1: config 0 descriptor?? [ 275.919168][ T3095] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 276.123261][ T3095] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 276.426810][ T9289] bond1: entered promiscuous mode [ 276.452554][ T3095] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 276.494247][ T3095] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 276.581813][ T3095] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 276.604590][ T3095] em28xx 6-1:0.0: No AC97 audio processor [ 276.685076][ T3095] usb 6-1: USB disconnect, device number 18 [ 276.791679][ T3095] em28xx 6-1:0.0: Disconnecting em28xx [ 276.802079][ T9306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.848974][ T3095] em28xx 6-1:0.0: Freeing device [ 276.867423][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.909124][ T9306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.946597][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.003935][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.013661][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.224390][ T9335] loop4: detected capacity change from 0 to 7 [ 278.252771][ T9335] Dev loop4: unable to read RDB block 7 [ 278.328015][ T9335] loop4: unable to read partition table [ 278.365614][ T9335] loop4: partition table beyond EOD, truncated [ 278.464122][ T9335] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 279.725769][ T6685] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 280.083654][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 280.083673][ T30] audit: type=1326 audit(1753719301.037:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 280.260828][ T30] audit: type=1326 audit(1753719301.037:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 280.284049][ T30] audit: type=1326 audit(1753719301.037:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 280.403168][ T30] audit: type=1326 audit(1753719301.037:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 280.425969][ T30] audit: type=1326 audit(1753719301.037:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 280.745862][ T30] audit: type=1326 audit(1753719301.037:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 280.769651][ T30] audit: type=1326 audit(1753719301.037:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 280.793785][ T30] audit: type=1326 audit(1753719301.037:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 280.826174][ T30] audit: type=1326 audit(1753719301.037:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 280.855502][ T30] audit: type=1326 audit(1753719301.037:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9363 comm="syz.2.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2af978e9a9 code=0x7ffc0000 [ 281.456353][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'. [ 281.505525][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.573'. [ 283.248511][ T9390] sctp: [Deprecated]: syz.5.583 (pid 9390) Use of int in maxseg socket option. [ 283.248511][ T9390] Use struct sctp_assoc_value instead [ 283.909293][ T9400] netlink: 124 bytes leftover after parsing attributes in process `syz.0.585'. [ 283.919248][ T9400] netlink: 76 bytes leftover after parsing attributes in process `syz.0.585'. [ 285.898258][ T6685] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 285.923858][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.597'. [ 286.076238][ T6685] usb 6-1: Using ep0 maxpacket: 16 [ 286.112604][ T6685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 286.134414][ T6685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 286.170294][ T6685] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.215996][ T6685] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 286.244283][ T6685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.354085][ T6685] usb 6-1: config 0 descriptor?? [ 286.404567][ T9422] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 286.418041][ T6685] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15 [ 286.619376][ T6685] usb 6-1: USB disconnect, device number 20 [ 286.619526][ C1] pxrc 6-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 286.846069][ T5202] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 287.048488][ T5863] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 287.251256][ T5202] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 288.166277][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.605'. [ 289.101139][ T9474] netlink: 20 bytes leftover after parsing attributes in process `syz.0.604'. [ 289.131070][ T9474] netlink: 136 bytes leftover after parsing attributes in process `syz.0.604'. [ 289.494124][ T9484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.543960][ T9484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.652834][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.673482][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.275305][ T3095] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 290.509051][ T3095] usb 6-1: config 0 has an invalid interface number: 147 but max is 0 [ 290.535519][ T3095] usb 6-1: config 0 has no interface number 0 [ 290.556239][ T3095] usb 6-1: config 0 interface 147 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 290.594836][ T3095] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 290.628742][ T3095] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 290.662588][ T3095] usb 6-1: Product: syz [ 290.680582][ T3095] usb 6-1: Manufacturer: syz [ 290.697437][ T3095] usb 6-1: SerialNumber: syz [ 290.778393][ T3095] usb 6-1: config 0 descriptor?? [ 290.802645][ T9492] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 290.842303][ T3095] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 291.102809][ T980] usb 6-1: USB disconnect, device number 21 [ 291.115129][ T7337] usb 6-1: Failed to submit usb control message: -71 [ 291.160694][ T7337] usb 6-1: unable to send the bmi data to the device: -71 [ 291.191006][ T7337] usb 6-1: unable to get target info from device [ 291.212879][ T7337] usb 6-1: could not get target info (-71) [ 291.234178][ T7337] usb 6-1: could not probe fw (-71) [ 291.460731][ T9512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.617'. [ 291.480836][ T9512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.617'. [ 291.801937][ T9517] netlink: 244 bytes leftover after parsing attributes in process `syz.5.619'. [ 291.919453][ T9520] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 292.092538][ T9520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.132588][ T9524] bond1: (slave gretap1): making interface the new active one [ 292.144420][ T9524] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 292.172460][ T980] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 292.316843][ T5951] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 292.349604][ T980] usb 6-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 292.362867][ T980] usb 6-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.381935][ T980] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 292.414322][ T980] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 292.424634][ T980] usb 6-1: Manufacturer: syz [ 292.431896][ T980] usb 6-1: SerialNumber: syz [ 292.485999][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 292.503599][ T5951] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 292.519121][ T5951] usb 4-1: config 0 has no interface number 0 [ 292.578744][ T5951] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=72.01 [ 292.598275][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.617994][ T5951] usb 4-1: Product: syz [ 292.624368][ T5951] usb 4-1: Manufacturer: syz [ 292.677595][ T980] usbhid 6-1:36.0: couldn't find an input interrupt endpoint [ 292.685456][ T5951] usb 4-1: SerialNumber: syz [ 292.721137][ T5951] usb 4-1: config 0 descriptor?? [ 292.740814][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.742171][ T980] usb 6-1: USB disconnect, device number 22 [ 292.811224][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.969263][ T9533] binder: 9531:9533 unknown command 0 [ 292.985901][ T9533] binder: 9531:9533 ioctl c0306201 200000000080 returned -22 [ 293.638055][ T9526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.670250][ T9526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.732782][ T9558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.744886][ T9558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.818123][ T5951] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 293.843420][ T9562] tipc: Failed to remove unknown binding: 66,1,1/0:2342091880/2342091882 [ 293.857996][ T9562] tipc: Failed to remove unknown binding: 66,1,1/0:2342091880/2342091882 [ 293.871576][ T9562] tipc: Failed to remove unknown binding: 66,1,1/0:2342091880/2342091882 [ 294.037461][ T5951] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.058889][ T5951] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.077775][ T5951] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.090316][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.154266][ T5951] usb 1-1: Product: syz [ 294.205915][ T5951] usb 1-1: Manufacturer: syz [ 294.210940][ T5951] usb 1-1: SerialNumber: syz [ 294.362291][ T980] usb 4-1: USB disconnect, device number 20 [ 294.613453][ T5951] usb 1-1: 0:2 : does not exist [ 294.684207][ T5951] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 294.828395][ T5951] usb 1-1: USB disconnect, device number 47 [ 294.957757][ T7181] udevd[7181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.000320][ T9582] netlink: 'syz.4.637': attribute type 21 has an invalid length. [ 295.012344][ T9582] netlink: 128 bytes leftover after parsing attributes in process `syz.4.637'. [ 295.054343][ T9582] netlink: 3 bytes leftover after parsing attributes in process `syz.4.637'. [ 295.941073][ T9599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.959655][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.972313][ T9599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.001404][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.018039][ T9602] net_ratelimit: 55 callbacks suppressed [ 296.018060][ T9602] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 296.425582][ T9606] loop9: detected capacity change from 0 to 7 [ 296.494450][ T9606] Dev loop9: unable to read RDB block 7 [ 296.575471][ T9606] loop9: unable to read partition table [ 296.607822][ T9606] loop9: partition table beyond EOD, truncated [ 296.656106][ T9606] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 297.266220][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 297.345823][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.646'. [ 297.632920][ T9635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.662229][ T9635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.753348][ T9635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.776141][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 297.793113][ T9635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.847850][ T9638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.877831][ T9638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.964796][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 297.990087][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.999507][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.029416][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.041295][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 298.052850][ T10] usb 1-1: can't read configurations, error -71 [ 298.722771][ T9642] syzkaller1: entered promiscuous mode [ 298.828267][ T9642] syzkaller1: entered allmulticast mode [ 298.864277][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 299.051361][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.086272][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.185616][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.242926][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.655560][ T9674] xt_hashlimit: size too large, truncated to 1048576 [ 301.005888][ T5951] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 301.719128][ T5951] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 301.732210][ T5951] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 301.746951][ T5951] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 301.824966][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.992698][ T5951] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.643518][ T5951] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 302.691274][ T9685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.769920][ T9685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.807902][ T9685] netlink: 36 bytes leftover after parsing attributes in process `syz.4.666'. [ 303.213055][ T9641] delete_channel: no stack [ 304.132304][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.167625][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.236034][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 304.248607][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.277943][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.320379][ T3095] usb 1-1: USB disconnect, device number 50 [ 304.329085][ T9701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.356050][ T9701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.364773][ T9665] delete_channel: no stack [ 304.457083][ T10] usb 4-1: config 0 has an invalid interface number: 47 but max is 0 [ 304.471680][ T10] usb 4-1: config 0 has no interface number 0 [ 304.481416][ T10] usb 4-1: config 0 interface 47 altsetting 252 bulk endpoint 0xD has invalid maxpacket 8 [ 304.497080][ T10] usb 4-1: config 0 interface 47 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 8 [ 304.523501][ T10] usb 4-1: config 0 interface 47 altsetting 252 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 304.610682][ T10] usb 4-1: config 0 interface 47 has no altsetting 0 [ 304.706285][ T10] usb 4-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b [ 304.784347][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.799816][ T10] usb 4-1: config 0 descriptor?? [ 304.811532][ T9699] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 304.819471][ T9699] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 304.906444][ T10] usb-storage 4-1:0.47: USB Mass Storage device detected [ 305.186672][ T10] usb 4-1: USB disconnect, device number 21 [ 307.095317][ T9737] netlink: 'syz.4.680': attribute type 10 has an invalid length. [ 307.284537][ T9737] veth0_vlan: left promiscuous mode [ 307.330567][ T9737] veth0_vlan: entered promiscuous mode [ 307.335224][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 307.366683][ T9737] team0: Device veth0_vlan failed to register rx_handler [ 309.002750][ T9760] Lens A: ================= START STATUS ================= [ 309.010672][ T9760] Lens A: Focus, Absolute: 0 [ 309.016041][ T9760] Lens A: ================== END STATUS ================== [ 310.907837][ T9776] tc_dump_action: action bad kind [ 312.178981][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.700'. [ 312.986792][ T9820] fuse: Bad value for 'fd' [ 314.157806][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.197236][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.299289][ T9796] netlink: 44 bytes leftover after parsing attributes in process `syz.4.698'. [ 314.366429][ T9798] netlink: 56 bytes leftover after parsing attributes in process `syz.4.698'. [ 315.967656][ T6685] hid-generic 009F:0008:0003.0004: unknown main item tag 0x0 [ 315.998338][ T9846] fuse: Unknown parameter 'user_i00000000000000000000' [ 316.051157][ T6685] hid-generic 009F:0008:0003.0004: unknown main item tag 0x0 [ 316.076649][ T6685] hid-generic 009F:0008:0003.0004: unknown main item tag 0x0 [ 316.084314][ T6685] hid-generic 009F:0008:0003.0004: unknown main item tag 0x0 [ 316.142916][ T6685] hid-generic 009F:0008:0003.0004: unknown main item tag 0x0 [ 316.181350][ T6685] hid-generic 009F:0008:0003.0004: unknown main item tag 0x0 [ 316.220187][ T6685] hid-generic 009F:0008:0003.0004: unknown main item tag 0x0 [ 316.245784][ T6685] hid-generic 009F:0008:0003.0004: unknown main item tag 0x0 [ 316.475221][ T6685] hid-generic 009F:0008:0003.0004: hidraw0: HID v0.05 Device [syz0] on syz0 [ 317.042573][ T9861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.078152][ T9861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.297913][ T9868] FAULT_INJECTION: forcing a failure. [ 317.297913][ T9868] name failslab, interval 1, probability 0, space 0, times 0 [ 317.325830][ T9868] CPU: 1 UID: 0 PID: 9868 Comm: syz.5.715 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 317.325860][ T9868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.325885][ T9868] Call Trace: [ 317.325894][ T9868] [ 317.325903][ T9868] dump_stack_lvl+0x189/0x250 [ 317.325935][ T9868] ? __pfx____ratelimit+0x10/0x10 [ 317.325958][ T9868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.325983][ T9868] ? __pfx__printk+0x10/0x10 [ 317.326018][ T9868] ? __pfx___might_resched+0x10/0x10 [ 317.326048][ T9868] should_fail_ex+0x414/0x560 [ 317.326076][ T9868] should_failslab+0xa8/0x100 [ 317.326110][ T9868] kmem_cache_alloc_noprof+0x73/0x3c0 [ 317.326141][ T9868] ? mas_alloc_nodes+0x2e9/0x8e0 [ 317.326168][ T9868] mas_alloc_nodes+0x2e9/0x8e0 [ 317.326200][ T9868] mas_preallocate+0x3ad/0x6f0 [ 317.326225][ T9868] ? __pfx_mas_preallocate+0x10/0x10 [ 317.326260][ T9868] ? __mas_set_range+0x12f/0x3c0 [ 317.326291][ T9868] __split_vma+0x2fa/0xa00 [ 317.326328][ T9868] ? __pfx___split_vma+0x10/0x10 [ 317.326376][ T9868] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 317.326421][ T9868] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 317.326470][ T9868] mmap_region+0x678/0x1f30 [ 317.326492][ T9868] ? __lock_acquire+0xab9/0xd20 [ 317.326527][ T9868] ? __lock_acquire+0xab9/0xd20 [ 317.326551][ T9868] ? __pfx_mmap_region+0x10/0x10 [ 317.326645][ T9868] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 317.326695][ T9868] ? cap_mmap_addr+0xb0/0x100 [ 317.326715][ T9868] ? bpf_lsm_mmap_addr+0x9/0x20 [ 317.326739][ T9868] ? security_mmap_addr+0x71/0x270 [ 317.326771][ T9868] ? shmem_mapping+0xd/0x50 [ 317.326790][ T9868] ? memfd_check_seals_mmap+0xc5/0x200 [ 317.326815][ T9868] do_mmap+0xc45/0x10d0 [ 317.326856][ T9868] ? __pfx_do_mmap+0x10/0x10 [ 317.326879][ T9868] ? down_write_killable+0x178/0x230 [ 317.326906][ T9868] ? end_current_label_crit_section+0x152/0x180 [ 317.326930][ T9868] ? __pfx_down_write_killable+0x10/0x10 [ 317.326964][ T9868] vm_mmap_pgoff+0x31b/0x4c0 [ 317.326995][ T9868] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 317.327021][ T9868] ? __fget_files+0x2a/0x420 [ 317.327044][ T9868] ? __fget_files+0x3a0/0x420 [ 317.327061][ T9868] ? __fget_files+0x2a/0x420 [ 317.327084][ T9868] ksys_mmap_pgoff+0x51f/0x760 [ 317.327120][ T9868] do_syscall_64+0xfa/0x3b0 [ 317.327142][ T9868] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.327164][ T9868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.327185][ T9868] ? clear_bhb_loop+0x60/0xb0 [ 317.327210][ T9868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.327230][ T9868] RIP: 0033:0x7f1dc318e9a9 [ 317.327249][ T9868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.327267][ T9868] RSP: 002b:00007f1dc3f3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 317.327288][ T9868] RAX: ffffffffffffffda RBX: 00007f1dc33b5fa0 RCX: 00007f1dc318e9a9 [ 317.327303][ T9868] RDX: 000000000280000b RSI: 00000000000e1000 RDI: 0000200000000000 [ 317.327317][ T9868] RBP: 00007f1dc3f3f090 R08: 0000000000000003 R09: 0000000000000000 [ 317.327329][ T9868] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 317.327341][ T9868] R13: 0000000000000000 R14: 00007f1dc33b5fa0 R15: 00007f1dc34dfa28 [ 317.327374][ T9868] [ 317.659198][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.666150][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 317.826357][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 317.841764][ T10] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 317.866755][ T10] usb 1-1: config 127 has no interface number 1 [ 317.879710][ T10] usb 1-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 317.913413][ T10] usb 1-1: config 127 interface 171 has no altsetting 0 [ 317.930381][ T10] usb 1-1: config 127 interface 0 has no altsetting 0 [ 317.980266][ T10] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 318.018970][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.033942][ T10] usb 1-1: Product: syz [ 318.049985][ T10] usb 1-1: Manufacturer: syz [ 318.054671][ T10] usb 1-1: SerialNumber: syz [ 318.330854][ T9864] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (33) [ 318.341045][ T9884] xt_hashlimit: size too large, truncated to 1048576 [ 318.430948][ T10] xr_serial 1-1:127.171: xr_serial converter detected [ 318.465090][ T10] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 318.483568][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 318.543019][ T10] usb 1-1: USB disconnect, device number 51 [ 318.619995][ T10] xr_serial 1-1:127.171: device disconnected [ 318.665749][ T44] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 318.850835][ T44] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 318.884910][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 318.926376][ T6685] IPVS: starting estimator thread 0... [ 318.961767][ T44] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 318.985891][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.018835][ T9893] IPVS: using max 29 ests per chain, 69600 per kthread [ 319.025787][ T44] usb 4-1: Product: syz [ 319.030305][ T44] usb 4-1: Manufacturer: syz [ 319.034947][ T44] usb 4-1: SerialNumber: syz [ 319.077084][ T44] usb 4-1: config 0 descriptor?? [ 319.086065][ T9888] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 319.130562][ T9898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.723'. [ 319.140582][ T44] gs_usb 4-1:0.0: Required endpoints not found [ 319.399081][ T5951] usb 4-1: USB disconnect, device number 22 [ 319.641024][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 319.835818][ T5167] Bluetooth: hci4: command 0x0406 tx timeout [ 320.601317][ T10] usb 6-1: config 0 has no interfaces? [ 321.863120][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.895548][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.015187][ T10] usb 6-1: Product: syz [ 322.034044][ T10] usb 6-1: Manufacturer: syz [ 322.056114][ T10] usb 6-1: SerialNumber: syz [ 322.711809][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.725060][ T10] usb 6-1: config 0 descriptor?? [ 322.726327][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.245754][ T5951] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 323.475979][ T5951] usb 4-1: Using ep0 maxpacket: 8 [ 323.643629][ T5951] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 323.657588][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.678166][ T5951] usb 4-1: Product: syz [ 323.682615][ T5951] usb 4-1: Manufacturer: syz [ 323.716455][ T5951] usb 4-1: SerialNumber: syz [ 323.728947][ T5951] usb 4-1: config 0 descriptor?? [ 323.888439][ T10] usb 6-1: can't set config #0, error -71 [ 323.904434][ T10] usb 6-1: USB disconnect, device number 23 [ 323.950697][ T5951] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 323.969546][ T5951] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 323.980942][ T5951] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 324.001850][ T5951] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 324.071749][ T5951] usb 4-1: USB disconnect, device number 23 [ 324.471384][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.481021][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.504783][ T9958] pimreg: entered allmulticast mode [ 324.543711][ T9958] dvmrp0: left allmulticast mode [ 324.560972][ T9958] pimreg: left allmulticast mode [ 324.761453][ T9968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.741'. [ 324.845806][ T6685] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 325.006605][ T6685] usb 1-1: Using ep0 maxpacket: 32 [ 325.235493][ T6685] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 325.254075][ T6685] usb 1-1: config 0 has no interface number 0 [ 325.282231][ T6685] usb 1-1: config 0 interface 184 has no altsetting 0 [ 325.402747][ T9978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.416096][ T9978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 325.460044][ T6685] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 325.500788][ T6685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.557355][ T6685] usb 1-1: Product: syz [ 325.635236][ T6685] usb 1-1: Manufacturer: syz [ 325.851597][ T6685] usb 1-1: SerialNumber: syz [ 325.872653][ T6685] usb 1-1: config 0 descriptor?? [ 325.893492][ T6685] smsc75xx v1.0.0 [ 326.297679][ T6685] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 326.330637][ T6685] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 326.370343][ T6685] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 326.417894][ T6685] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 327.647295][ T44] usb 1-1: USB disconnect, device number 52 [ 327.672578][ T9996] loop9: detected capacity change from 0 to 7 [ 327.733095][ T9996] Dev loop9: unable to read RDB block 7 [ 327.779304][ T9996] loop9: unable to read partition table [ 328.156960][ T9996] loop9: partition table beyond EOD, truncated [ 328.174275][ T9996] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 328.361581][T10001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.407502][T10001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.581810][ T6685] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 328.622928][ T3095] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 328.799750][ T3095] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.816938][ T3095] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 328.826506][ T6685] usb 1-1: Using ep0 maxpacket: 32 [ 328.836100][ T3095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.854995][ T3095] usb 4-1: Product: syz [ 328.856160][ T6685] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 328.874309][ T3095] usb 4-1: Manufacturer: syz [ 328.882149][T10012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.751'. [ 328.939602][ T3095] usb 4-1: SerialNumber: syz [ 328.965143][ T6685] usb 1-1: config 0 has no interface number 0 [ 329.000732][ T6685] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.044605][ T6685] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.089621][ T6685] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 329.113879][ T6685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.160394][ T6685] usb 1-1: config 0 descriptor?? [ 329.385600][ T3095] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 329.420511][ T3095] cdc_ncm 4-1:1.0: bind() failure [ 329.575545][ T3095] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 329.643637][ T3095] cdc_ncm 4-1:1.1: bind() failure [ 329.866900][ T6685] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0005/input/input16 [ 330.608171][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 330.608201][ T30] audit: type=1800 audit(1753719351.007:72): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.749" name="file1" dev="tmpfs" ino=719 res=0 errno=0 [ 330.615846][ T44] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 330.648592][ T6685] uclogic 0003:28BD:0094.0005: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 330.816987][ T3095] usb 4-1: USB disconnect, device number 24 [ 330.848248][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.867619][ T44] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 330.891764][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.041404][ T44] usb 6-1: config 0 descriptor?? [ 331.122863][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 331.332473][ T980] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 331.523526][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 331.544790][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 331.558057][ T3095] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 331.762766][ T44] pwc: recv_control_msg error -71 req 04 val 1000 [ 331.785787][ T3095] usb 4-1: Using ep0 maxpacket: 8 [ 331.791646][ T44] pwc: recv_control_msg error -71 req 04 val 1300 [ 331.799079][ T3095] usb 4-1: unable to get BOS descriptor or descriptor too short [ 331.810509][ T44] pwc: recv_control_msg error -71 req 04 val 1400 [ 331.863363][ T3095] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 331.883198][ T44] pwc: recv_control_msg error -71 req 02 val 2000 [ 331.899617][ T44] pwc: recv_control_msg error -71 req 02 val 2100 [ 331.919317][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 331.936282][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 331.940789][ T3095] usb 4-1: config 8 has no interface number 0 [ 331.977328][ T3095] usb 4-1: config 8 interface 255 has no altsetting 0 [ 332.003734][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 332.008120][ T3095] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 332.042459][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 332.056890][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 332.071323][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 332.083426][ T3095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.091844][ T3095] usb 4-1: Product: syz [ 332.096420][ T3095] usb 4-1: Manufacturer: syz [ 332.101071][ T3095] usb 4-1: SerialNumber: syz [ 332.142960][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 332.191211][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 332.203413][ T44] pwc: Registered as video103. [ 332.212537][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 332.221357][ T44] usb 6-1: USB disconnect, device number 24 [ 332.364115][ T3095] catc 4-1:8.255: Can't set altsetting 1. [ 332.413215][T10003] syz.0.749 (10003): drop_caches: 2 [ 332.451551][ T3095] catc 4-1:8.255: probe with driver catc failed with error -5 [ 332.513039][ T3095] usb 4-1: USB disconnect, device number 25 [ 332.756580][T10043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.766389][T10043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.931192][T10043] IPVS: Error connecting to the multicast addr [ 332.956269][T10043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.566341][ T44] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 333.602144][ T5951] usb 1-1: USB disconnect, device number 53 [ 333.745813][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 334.047924][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.234502][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.262721][ T44] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 334.379474][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.712567][ T44] usb 4-1: config 0 descriptor?? [ 334.802088][T10069] loop9: detected capacity change from 0 to 7 [ 334.832261][T10069] Dev loop9: unable to read RDB block 7 [ 334.858724][T10069] loop9: unable to read partition table [ 334.880075][T10069] loop9: partition table beyond EOD, truncated [ 334.890217][T10071] loop8: detected capacity change from 0 to 8 [ 334.905896][T10071] Dev loop8: unable to read RDB block 8 [ 334.912110][T10071] loop8: unable to read partition table [ 334.918272][T10069] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 334.918833][T10071] loop8: partition table beyond EOD, truncated [ 334.953321][T10071] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 334.988175][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.006587][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.270538][ T44] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 335.538585][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.556520][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.587251][ T3095] usb 4-1: USB disconnect, device number 26 [ 335.715959][ T44] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 335.875847][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 335.893120][ T44] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 335.971398][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.980539][ T44] usb 1-1: Product: syz [ 335.987371][ T44] usb 1-1: Manufacturer: syz [ 335.993521][ T44] usb 1-1: SerialNumber: syz [ 336.008338][ T44] usb 1-1: config 0 descriptor?? [ 336.074432][T10100] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 336.222995][ T44] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 336.275088][T10100] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.509817][T10100] bond0: (slave team0): Enslaving as an active interface with an up link [ 337.001791][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 337.060381][ T30] audit: type=1326 audit(1753719358.017:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9d8e9a9 code=0x7ffc0000 [ 337.112575][ T30] audit: type=1326 audit(1753719358.017:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9d8e9a9 code=0x7ffc0000 [ 337.281016][ T30] audit: type=1326 audit(1753719358.107:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8b9d8e9a9 code=0x7ffc0000 [ 337.429989][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 337.815871][ T44] gspca_sunplus: reg_w_riv err -110 [ 338.025880][ T44] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 338.139752][ T44] usb 1-1: USB disconnect, device number 54 [ 338.149862][ T30] audit: type=1326 audit(1753719358.107:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9d8e9a9 code=0x7ffc0000 [ 338.255539][ T30] audit: type=1326 audit(1753719358.107:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10102 comm="syz.3.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8b9d8e9a9 code=0x7ffc0000 [ 340.226240][ T980] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 340.316560][ T5951] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 340.409899][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 340.444910][ T980] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 340.505485][ T980] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 340.561956][ T980] usb 6-1: Product: syz [ 340.568719][ T980] usb 6-1: Manufacturer: syz [ 340.578602][ T5951] usb 1-1: unable to get BOS descriptor or descriptor too short [ 340.608742][ T5951] usb 1-1: not running at top speed; connect to a high speed hub [ 340.618169][ T5951] usb 1-1: config 1 has an invalid descriptor of length 135, skipping remainder of the config [ 340.650320][ T980] usb 6-1: SerialNumber: syz [ 340.659010][ T5951] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 340.671632][ T980] usb 6-1: config 0 descriptor?? [ 340.713734][ T5951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 36, changing to 4 [ 340.756041][ T5951] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 11552, setting to 1023 [ 340.825308][ T5951] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.845237][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.870443][ T5951] usb 1-1: Product: ᐸꩮ撿켔曫噯瀉靪縷∮䅽᳖൦恪꘣ț趴墬팽 [ 340.887427][ T5951] usb 1-1: Manufacturer: 瀇暳쥯퇟롦鳜䨤推뷯癈齖钉툛枰⬟ꈯȕ〥Ⴊ앹满樞䐟雠依룐㙘ݨ [ 340.904219][ T5951] usb 1-1: SerialNumber: Щ [ 340.936694][ T10] usb 6-1: USB disconnect, device number 25 [ 341.158264][ T5951] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 341.171138][ T5951] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 341.179550][ T5951] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 341.186248][ T980] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 341.217502][ T5951] usb 1-1: USB disconnect, device number 55 [ 341.294545][ T7181] udevd[7181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.346158][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 341.353477][ T980] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 71, changing to 10 [ 341.367946][ T980] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.379659][ T980] usb 4-1: config 1 interface 0 has no altsetting 0 [ 341.394730][ T980] usb 4-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.40 [ 341.404127][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.412924][ T980] usb 4-1: Product: syz [ 341.417440][ T980] usb 4-1: Manufacturer: syz [ 341.422180][ T980] usb 4-1: SerialNumber: syz [ 341.837928][T10171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.865929][T10171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.875282][T10182] ipt_REJECT: ECHOREPLY no longer supported. [ 341.891885][ T980] usbhid 4-1:1.0: can't add hid device: -71 [ 341.908185][ T980] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 341.924419][ T980] usb 4-1: USB disconnect, device number 27 [ 343.382535][T10210] veth1_macvtap: left allmulticast mode [ 343.391552][T10210] veth1_macvtap: left promiscuous mode [ 344.095802][ T6685] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 344.524734][ T6685] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 344.636597][ T6685] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 344.685010][ T6685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 344.795752][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 344.966372][ T6685] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 345.000537][ T6685] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 345.011312][ T6685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.024219][ T6685] usb 6-1: Product: syz [ 345.030355][ T6685] usb 6-1: Manufacturer: syz [ 345.035103][ T6685] usb 6-1: SerialNumber: syz [ 345.050564][ T6685] usb 6-1: config 0 descriptor?? [ 345.061311][T10225] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 345.106224][ T10] usb 1-1: device descriptor read/64, error -71 [ 345.157816][ T6685] usb 6-1: ucan: probing device on interface #0 [ 345.167021][ T6685] usb 6-1: ucan: invalid in_ep MaxPacketSize [ 345.173198][ T6685] usb 6-1: ucan: probe failed; try to update the device firmware [ 345.345943][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 345.496059][ T10] usb 1-1: device descriptor read/64, error -71 [ 345.628040][ T10] usb usb1-port1: attempt power cycle [ 345.881480][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.894819][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.986127][ T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 346.026483][ T10] usb 1-1: device descriptor read/8, error -71 [ 346.278477][ T10] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 346.326703][ T10] usb 1-1: device descriptor read/8, error -71 [ 346.448810][ T10] usb usb1-port1: unable to enumerate USB device [ 346.518749][ T6685] usb 6-1: USB disconnect, device number 26 [ 346.622180][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.653120][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.810843][T10253] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[10253] [ 346.828309][T10253] dns_resolver: Unsupported server list version (0) [ 347.440548][ T30] audit: type=1326 audit(1753719368.397:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10266 comm="syz.2.821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2af978e9a9 code=0x0 [ 347.518873][T10267] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.665945][ T6685] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 347.780616][T10281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.810863][T10281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.819307][ T6685] usb 1-1: device descriptor read/64, error -71 [ 347.915397][T10282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.825'. [ 347.928586][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 348.039150][T10281] netlink: 'syz.2.826': attribute type 2 has an invalid length. [ 348.086069][ T6685] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 348.086945][T10281] : entered promiscuous mode [ 348.225818][ T6685] usb 1-1: device descriptor read/64, error -71 [ 348.336264][ T6685] usb usb1-port1: attempt power cycle [ 348.678565][ T6685] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 348.713158][ T6685] usb 1-1: device descriptor read/8, error -71 [ 348.873629][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 348.887457][T10292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.976270][ T6685] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 349.009619][ T6685] usb 1-1: device descriptor read/8, error -71 [ 349.019721][T10294] openvswitch: netlink: Flow key attr not present in new flow. [ 349.136486][ T6685] usb usb1-port1: unable to enumerate USB device [ 349.320472][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.333379][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.358324][T10303] sctp: [Deprecated]: syz.2.832 (pid 10303) Use of int in maxseg socket option. [ 349.358324][T10303] Use struct sctp_assoc_value instead [ 349.932854][T10306] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 350.274253][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.5.838'. [ 350.318360][T10322] tipc: Cannot configure node identity twice [ 350.358619][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 350.451040][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 350.966434][T10329] bond0: entered promiscuous mode [ 350.978668][T10329] bond_slave_0: entered promiscuous mode [ 351.005087][T10329] bond_slave_1: entered promiscuous mode [ 351.028895][T10352] Cannot find add_set index 1 as target [ 351.645949][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 351.775246][T10362] sctp: [Deprecated]: syz.5.847 (pid 10362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.775246][T10362] Use struct sctp_sack_info instead [ 351.895816][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 351.903409][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 351.919678][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 351.977303][ T10] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 352.005087][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.081754][ T10] usb 4-1: Product: syz [ 352.107704][ T10] usb 4-1: Manufacturer: syz [ 352.118789][ T10] usb 4-1: SerialNumber: syz [ 352.125878][ T6685] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 352.155918][ T10] usb 4-1: config 0 descriptor?? [ 352.169132][ T10] usb 4-1: no audio or video endpoints found [ 352.338871][ T6685] usb 6-1: Using ep0 maxpacket: 16 [ 352.364258][ T6685] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.370657][T10356] netlink: 'syz.3.845': attribute type 10 has an invalid length. [ 352.405118][ T6685] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 352.425264][ T6685] usb 6-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 352.446315][ T6685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.473801][T10356] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 352.489827][ T6685] usb 6-1: config 0 descriptor?? [ 352.547576][T10356] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 352.568337][ T6685] usb 4-1: USB disconnect, device number 28 [ 353.068302][T10372] netlink: 148 bytes leftover after parsing attributes in process `syz.5.847'. [ 353.210725][T10372] netlink: 148 bytes leftover after parsing attributes in process `syz.5.847'. [ 353.313597][T10376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 354.443462][T10393] loop9: detected capacity change from 0 to 7 [ 354.467856][T10393] Dev loop9: unable to read RDB block 7 [ 354.480372][T10393] loop9: unable to read partition table [ 354.500758][T10393] loop9: partition table beyond EOD, truncated [ 354.559695][T10393] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 354.671464][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 354.717955][T10395] bond0: entered allmulticast mode [ 354.733710][T10395] bond_slave_0: entered allmulticast mode [ 354.758268][T10395] bond_slave_1: entered allmulticast mode [ 354.787289][ T980] usb 6-1: USB disconnect, device number 27 [ 354.832789][T10395] bridge_slave_1: entered allmulticast mode [ 354.946357][T10395] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 354.957279][T10395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.343952][T10406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.369521][T10406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.826193][ T30] audit: type=1326 audit(1753719379.777:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.5.866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1dc318e9a9 code=0x0 [ 359.992545][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.874'. [ 360.252650][T10472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.874'. [ 360.792296][T10483] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 361.184015][T10490] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 362.519894][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.704459][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.785783][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 364.946478][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 364.954526][ T10] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 364.965378][ T10] usb 4-1: config 0 has no interface number 0 [ 364.979892][ T10] usb 4-1: config 0 interface 29 has no altsetting 0 [ 364.993367][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 365.014082][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.022744][ T10] usb 4-1: Product: syz [ 365.028976][ T10] usb 4-1: Manufacturer: syz [ 365.035002][ T10] usb 4-1: SerialNumber: syz [ 365.048877][ T10] usb 4-1: config 0 descriptor?? [ 365.117015][ T6685] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 365.266313][ T10] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 365.289640][ T6685] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 365.329629][ T6685] usb 1-1: config 0 has no interface number 0 [ 365.359598][ T6685] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 365.463522][ T6685] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 365.475911][ T10] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 365.508115][ T10] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 365.526047][ T6685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.554653][ T10] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 365.589742][ T6685] usb 1-1: Product: syz [ 365.619414][ T6685] usb 1-1: Manufacturer: syz [ 365.654420][ T6685] usb 1-1: SerialNumber: syz [ 365.667774][ T6685] usb 1-1: config 0 descriptor?? [ 365.687353][T10536] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 365.698043][ T6685] ums-sddr09 1-1:0.20: USB Mass Storage device detected [ 365.771782][ T10] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 365.794161][ T10] usb 4-1: USB disconnect, device number 29 [ 365.803640][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.900935][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.035908][ T6685] ums-sddr09 1-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 366.156454][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.179084][ T6685] usb 1-1: USB disconnect, device number 64 [ 366.250664][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.383798][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'. [ 367.395920][T10578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.897'. [ 369.285931][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.303586][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.465885][ T9] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 369.668023][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 369.682382][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 369.698406][ T9] usb 1-1: config 1 has an invalid interface number: 94 but max is 0 [ 369.718521][ T9] usb 1-1: config 1 has no interface number 0 [ 369.731490][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=51.70 [ 369.743448][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.755066][ T9] usb 1-1: Product: syz [ 369.760427][ T9] usb 1-1: Manufacturer: syz [ 369.765243][ T9] usb 1-1: SerialNumber: syz [ 369.816303][ T5951] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 369.986294][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 370.014902][ T5951] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 370.053763][ T9] usb 1-1: Invalid firmware size=18. [ 370.078673][ T9] usb 1-1: USB disconnect, device number 65 [ 370.089373][ T5951] usb 4-1: config 253 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 370.128016][T10612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.146920][T10612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.226091][ T5951] usb 4-1: config 253 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 370.270586][ T5951] usb 4-1: config 253 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 370.280899][ T5951] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 370.351400][ T5951] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.361145][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 370.384678][ T5951] usb 4-1: SerialNumber: syz [ 370.396623][T10604] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 370.415955][T10604] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 370.423927][T10604] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 370.698176][ T5951] usb 4-1: USB disconnect, device number 30 [ 370.855878][ T980] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 371.016156][ T980] usb 6-1: Using ep0 maxpacket: 32 [ 371.024754][ T980] usb 6-1: config 0 has an invalid interface number: 248 but max is 0 [ 371.037994][ T980] usb 6-1: config 0 has no interface number 0 [ 371.048460][ T980] usb 6-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=83.0d [ 371.059067][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.067592][ T980] usb 6-1: Product: syz [ 371.072071][ T980] usb 6-1: Manufacturer: syz [ 371.078481][ T980] usb 6-1: SerialNumber: syz [ 371.090486][ T980] usb 6-1: config 0 descriptor?? [ 371.110642][ T980] ttusb_dec_send_command: command bulk message failed: error -22 [ 371.121988][ T980] ttusb-dec 6-1:0.248: probe with driver ttusb-dec failed with error -22 [ 371.302820][ T980] usb 6-1: USB disconnect, device number 28 [ 371.455899][ T44] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 371.619076][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.629833][ T44] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.653914][ T44] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.673660][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.681207][ T44] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 371.691103][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.704370][ T44] usb 1-1: config 0 descriptor?? [ 372.117729][ T44] kye 0003:0458:5015.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 372.389131][ T44] kye 0003:0458:5015.0007: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 372.406280][ T44] kye 0003:0458:5015.0007: tablet-enabling feature report not found [ 372.422991][ T44] kye 0003:0458:5015.0007: tablet enabling failed [ 372.476979][ T44] usb 1-1: USB disconnect, device number 66 [ 373.220546][T10643] fido_id[10643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 373.818617][T10656] netlink: 'syz.5.916': attribute type 1 has an invalid length. [ 374.054398][T10656] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.179449][T10660] bond2: (slave veth3): Enslaving as an active interface with a down link [ 374.264413][T10662] vlan2: entered allmulticast mode [ 374.273184][T10662] veth1: entered allmulticast mode [ 374.288898][T10662] veth1: entered promiscuous mode [ 374.333727][T10662] veth1: left promiscuous mode [ 374.443522][T10662] bond2: (slave vlan2): making interface the new active one [ 374.454993][T10662] veth1: entered promiscuous mode [ 374.641131][T10662] vlan2: entered promiscuous mode [ 374.648694][T10662] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 376.475964][ T31] INFO: task kworker/0:4:5920 blocked for more than 143 seconds. [ 376.493041][T10697] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 376.520465][ T31] Not tainted 6.16.0-syzkaller #0 [ 376.540925][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.570221][ T31] task:kworker/0:4 state:D stack:19480 pid:5920 tgid:5920 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 376.629959][ T31] Workqueue: usb_hub_wq hub_event [ 376.655994][ T31] Call Trace: [ 376.673092][ T31] [ 376.704046][ T31] __schedule+0x16fd/0x4cf0 [ 376.714521][ T31] ? bus_probe_device+0x185/0x260 [ 376.753348][ T31] ? hub_event+0x2958/0x4a20 [ 376.772780][ T31] ? schedule+0x165/0x360 [ 376.782037][ T31] ? __pfx___schedule+0x10/0x10 [ 376.798981][ T31] ? schedule+0x91/0x360 [ 376.811571][ T31] schedule+0x165/0x360 [ 376.822815][ T31] schedule_timeout+0x9a/0x270 [ 376.834058][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 376.850405][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.863790][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.882605][ T31] ? wait_for_completion+0x267/0x5d0 [ 376.899570][ T31] wait_for_completion+0x2bf/0x5d0 [ 376.948234][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 377.036134][ T31] i2c_del_adapter+0x581/0x6e0 [ 377.055692][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 377.080406][ T31] ? rcu_is_watching+0x15/0xb0 [ 377.101717][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 377.156733][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 377.180249][ T31] dvb_usb_device_exit+0x1be/0x350 [ 377.219739][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 377.240290][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 377.260206][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.268786][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 377.301867][ T31] cxusb_probe+0x603/0x700 [ 377.310883][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 377.339739][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 377.352097][ T31] usb_probe_interface+0x641/0xbc0 [ 377.364502][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 377.376758][ T31] really_probe+0x26a/0x9a0 [ 377.382174][ T31] __driver_probe_device+0x18c/0x2f0 [ 377.388525][ T31] driver_probe_device+0x4f/0x430 [ 377.394515][ T31] __device_attach_driver+0x2ce/0x530 [ 377.401978][ T31] bus_for_each_drv+0x251/0x2e0 [ 377.411000][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 377.418790][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 377.424948][ T31] __device_attach+0x2b8/0x400 [ 377.434432][ T31] ? __pfx___device_attach+0x10/0x10 [ 377.441599][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 377.447155][ T31] bus_probe_device+0x185/0x260 [ 377.452861][ T31] device_add+0x7b6/0xb50 [ 377.458463][ T31] usb_set_configuration+0x1a87/0x20e0 [ 377.464529][ T31] usb_generic_driver_probe+0x8d/0x150 [ 377.470803][ T31] usb_probe_device+0x1c4/0x390 [ 377.476134][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 377.482097][ T31] really_probe+0x26a/0x9a0 [ 377.486846][ T31] __driver_probe_device+0x18c/0x2f0 [ 377.493423][ T31] driver_probe_device+0x4f/0x430 [ 377.498843][ T31] __device_attach_driver+0x2ce/0x530 [ 377.505283][ T31] bus_for_each_drv+0x251/0x2e0 [ 377.511268][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 377.517774][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 377.523420][ T31] __device_attach+0x2b8/0x400 [ 377.529143][ T31] ? __pfx___device_attach+0x10/0x10 [ 377.535361][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 377.542165][ T31] bus_probe_device+0x185/0x260 [ 377.547878][ T31] device_add+0x7b6/0xb50 [ 377.552395][ T31] usb_new_device+0xa39/0x16c0 [ 377.557989][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 377.563569][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.569514][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.574942][ T31] hub_event+0x2958/0x4a20 [ 377.579698][ T31] ? __pfx_hub_event+0x10/0x10 [ 377.584729][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 377.590851][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.596209][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 377.602069][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 377.608028][ T31] process_scheduled_works+0xae1/0x17b0 [ 377.613677][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 377.620577][ T31] worker_thread+0x8a0/0xda0 [ 377.625308][ T31] kthread+0x711/0x8a0 [ 377.629555][ T31] ? __pfx_worker_thread+0x10/0x10 [ 377.635024][ T31] ? __pfx_kthread+0x10/0x10 [ 377.639783][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.646198][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.651735][ T31] ? __pfx_kthread+0x10/0x10 [ 377.656761][ T31] ret_from_fork+0x3fc/0x770 [ 377.661536][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 377.666969][ T31] ? __switch_to_asm+0x39/0x70 [ 377.671883][ T31] ? __switch_to_asm+0x33/0x70 [ 377.676842][ T31] ? __pfx_kthread+0x10/0x10 [ 377.682650][ T31] ret_from_fork_asm+0x1a/0x30 [ 377.687596][ T31] [ 377.691193][ T31] [ 377.691193][ T31] Showing all locks held in the system: [ 377.699204][ T31] 1 lock held by khungtaskd/31: [ 377.704250][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 377.714897][ T31] 2 locks held by kworker/u8:6/1151: [ 377.721004][ T31] 4 locks held by klogd/5206: [ 377.726101][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 377.736883][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 377.750082][ T31] #2: ffff888065b96428 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x6e/0x1290 [ 377.761290][ T31] #3: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 377.772707][ T31] 2 locks held by getty/5607: [ 377.779600][ T31] #0: ffff888030e3d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 377.791109][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 377.804006][ T31] 5 locks held by kworker/0:4/5920: [ 377.810698][ T31] #0: ffff888021a85948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 377.822621][ T31] #1: ffffc9000acafbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 377.837703][ T31] #2: ffff88814432a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 377.850971][ T31] #3: ffff88807d1db198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 377.863228][ T31] #4: ffff88807e198160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 377.874139][ T31] 4 locks held by udevd/6463: [ 377.879408][ T31] #0: ffff8880418b59e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 377.888638][ T31] #1: ffff8880302d6488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 377.898714][ T31] #2: ffff8880590f0788 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 377.909276][ T31] #3: ffff88807d1db198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 377.918996][ T31] 3 locks held by kworker/u8:8/7324: [ 377.924383][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 377.936681][ T31] #1: ffffc90003b3fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 377.947935][ T31] #2: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 377.961047][ T31] 4 locks held by kworker/u8:18/7351: [ 377.966577][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 377.977732][ T31] #1: ffffc90003007bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 377.991488][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 378.001065][ T31] #3: ffffe8ffffd79588 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x16a/0x6d0 [ 378.013195][ T31] 1 lock held by syz.3.924/10692: [ 378.018575][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 378.029057][ T31] 2 locks held by syz.0.925/10696: [ 378.034224][ T31] #0: ffffffff8f51c1c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 378.043509][ T31] #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 378.060191][ T31] [ 378.073680][ T31] ============================================= [ 378.073680][ T31] [ 378.082898][ T31] NMI backtrace for cpu 0 [ 378.082921][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 378.082945][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.082958][ T31] Call Trace: [ 378.082966][ T31] [ 378.082975][ T31] dump_stack_lvl+0x189/0x250 [ 378.083003][ T31] ? __wake_up_klogd+0xd9/0x110 [ 378.083035][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.083059][ T31] ? __pfx__printk+0x10/0x10 [ 378.083101][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 378.083135][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 378.083188][ T31] ? _printk+0xcf/0x120 [ 378.083220][ T31] ? __pfx__printk+0x10/0x10 [ 378.083249][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.083273][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 378.083308][ T31] watchdog+0xfee/0x1030 [ 378.083328][ T31] ? watchdog+0x1de/0x1030 [ 378.083355][ T31] kthread+0x711/0x8a0 [ 378.083388][ T31] ? __pfx_watchdog+0x10/0x10 [ 378.083405][ T31] ? __pfx_kthread+0x10/0x10 [ 378.083435][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.083456][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.083475][ T31] ? __pfx_kthread+0x10/0x10 [ 378.083504][ T31] ret_from_fork+0x3fc/0x770 [ 378.083527][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 378.083553][ T31] ? __switch_to_asm+0x39/0x70 [ 378.083577][ T31] ? __switch_to_asm+0x33/0x70 [ 378.083598][ T31] ? __pfx_kthread+0x10/0x10 [ 378.083625][ T31] ret_from_fork_asm+0x1a/0x30 [ 378.083665][ T31] [ 378.083673][ T31] Sending NMI from CPU 0 to CPUs 1: [ 378.249054][ C1] NMI backtrace for cpu 1 [ 378.249072][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 378.249092][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.249115][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 378.249148][ C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 8d 1a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 378.249163][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 378.249179][ C1] RAX: 04e5f9cde4d4c200 RBX: ffffffff81976a28 RCX: 04e5f9cde4d4c200 [ 378.249192][ C1] RDX: 0000000000000001 RSI: ffffffff8d996535 RDI: ffffffff8be28d80 [ 378.249204][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 378.249217][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1ddf0 [ 378.249230][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad4b40 [ 378.249241][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 378.249255][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.249267][ C1] CR2: 00007f1dc33802d8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 378.249282][ C1] Call Trace: [ 378.249291][ C1] [ 378.249297][ C1] default_idle+0x13/0x20 [ 378.249319][ C1] default_idle_call+0x74/0xb0 [ 378.249342][ C1] do_idle+0x1e8/0x510 [ 378.249366][ C1] ? __pfx_do_idle+0x10/0x10 [ 378.249394][ C1] cpu_startup_entry+0x44/0x60 [ 378.249414][ C1] start_secondary+0x101/0x110 [ 378.249429][ C1] common_startup_64+0x13e/0x147 [ 378.249462][ C1] [ 378.254838][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 378.424395][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 378.434163][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.444257][ T31] Call Trace: [ 378.447648][ T31] [ 378.450599][ T31] dump_stack_lvl+0x99/0x250 [ 378.455266][ T31] ? __asan_memcpy+0x40/0x70 [ 378.459909][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.465320][ T31] ? __pfx__printk+0x10/0x10 [ 378.469965][ T31] panic+0x2db/0x790 [ 378.473895][ T31] ? __pfx_panic+0x10/0x10 [ 378.478353][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 378.484281][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 378.489681][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 378.496040][ T31] watchdog+0x102d/0x1030 [ 378.500395][ T31] ? watchdog+0x1de/0x1030 [ 378.505090][ T31] kthread+0x711/0x8a0 [ 378.509209][ T31] ? __pfx_watchdog+0x10/0x10 [ 378.513908][ T31] ? __pfx_kthread+0x10/0x10 [ 378.518534][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.523782][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.529114][ T31] ? __pfx_kthread+0x10/0x10 [ 378.533914][ T31] ret_from_fork+0x3fc/0x770 [ 378.538523][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 378.543837][ T31] ? __switch_to_asm+0x39/0x70 [ 378.548655][ T31] ? __switch_to_asm+0x33/0x70 [ 378.553443][ T31] ? __pfx_kthread+0x10/0x10 [ 378.558324][ T31] ret_from_fork_asm+0x1a/0x30 [ 378.563145][ T31] [ 378.566541][ T31] Kernel Offset: disabled [ 378.570970][ T31] Rebooting in 86400 seconds..